30 skills for Cursor
Review an Angular change for standalone components, signals, zoneless updates, and Signal Forms. Use for an Angular code review. Do not use for a new NgModule-first app or a non-Angular repository.
# Angular Code Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/angular-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Angular Code Review Skill for Cursor
Cursor skill `angular-code-review` for Angular. Run it with `/angular-code-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for an Angular change: a component, a form, a route, or "is this still the old style".
## When to leave it
Stop for a non-Ang...Review a Django change for permission checks, ORM query shape, and migration behavior. Use for a Django security review. Do not use for a non-Django project or to assume a database cascade runs Django signals.
# Django Security Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/django-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Django Security Review Skill for Cursor
Cursor skill `django-security-review` for Django. Run it with `/django-security-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for a Django view, model, form, or migration.
## When to leave it
Stop for a non-Django repository. Do not upgr...Review a Dockerfile or Compose file for root runtime, latest tags, secrets in layers, and the Docker socket. Use for a Docker security review. Do not use for a non-container change or to mount the Docker socket into an app container.
# Docker Security Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/docker-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Docker Security Review Skill for Cursor
Cursor skill `docker-security-review` for Docker. Run it with `/docker-security-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for a Dockerfile, a Compose file, or a request to "check the image".
## When to leave it
Do not upgrade depende...Review a .NET change for async cancellation, endpoint authorization, and C# syntax the target framework does not have. Use for a .NET code review. Do not use for a non-.NET repository or to retarget the TFM unasked.
# .NET Code Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/dotnet-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# .NET Code Review Skill for Cursor
Cursor skill `dotnet-code-review` for .NET. Run it with `/dotnet-code-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for a .NET or C# change: an endpoint, an EF query, or an async method.
## When to leave it
Stop for a non-.NET repository. Do not change ...Review an Express app for middleware order, Express 5 route syntax, validation, and auth. Use for an Express security review. Do not use for a Fastify or NestJS app, or to forward errors twice.
# Express Security Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/express-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Express Security Review Skill for Cursor
Cursor skill `express-security-review` for Express. Run it with `/express-security-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for an Express router, middleware order, or an Express 4 to 5 migration.
## When to leave it
Stop for Fas...Review a FastAPI change for Pydantic validation, auth dependencies, and blocking work in async routes. Use for a FastAPI security review. Do not use for a non-FastAPI Python script or to expose a hidden field in a response model.
# FastAPI Security Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/fastapi-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# FastAPI Security Review Skill for Cursor
Cursor skill `fastapi-security-review` for FastAPI. Run it with `/fastapi-security-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for a FastAPI route, a Pydantic model, or a request to "check the API auth".
## When to leave it
Stop for...Write a Flutter widget or unit test for a behavior, including the mounted check after an await. Use when the user asks for Flutter tests. Do not use for a non-Flutter repository or to edit a generated file.
# Flutter Test Writer Skill for Cursor
## Install
Install the native export at `.cursor/skills/flutter-test-writer/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Flutter Test Writer Skill for Cursor
Cursor skill `flutter-test-writer` for Flutter. Run it with `/flutter-test-writer`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this when the user wants a Flutter test: a widget test, a unit test, or a regression for a UI bug.
## When to leave it
Stop for a non-Flu...Review a Go change for ignored errors, goroutine leaks, and context that is not canceled. Use for a Go code review. Do not use for a non-Go repository or to enable an experimental flag by default.
# Go Code Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/go-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Go Code Review Skill for Cursor
Cursor skill `go-code-review` for Go. Run it with `/go-code-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for a Go change: a handler, a worker, a package, or "check the error paths".
## When to leave it
Stop for a non-Go repository. Do not bump the `go` line in...Review a Kotlin change for coroutine cancellation, lifecycle-aware flows, and null assertions. Use for a Kotlin code review. Do not use for a non-Kotlin repository or to swallow CancellationException.
# Kotlin Code Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/kotlin-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Kotlin Code Review Skill for Cursor
Cursor skill `kotlin-code-review` for Kotlin. Run it with `/kotlin-code-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for a Kotlin coroutine, a Flow, a Compose screen, or an Android lifecycle change.
## When to leave it
Stop for a non-Kotlin reposit...Review a Laravel change for policies, Form Request validation, and mass assignment. Use for a Laravel security review. Do not use for a non-Laravel PHP script or to run a migration against production.
# Laravel Security Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/laravel-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Laravel Security Review Skill for Cursor
Cursor skill `laravel-security-review` for Laravel. Run it with `/laravel-security-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for a Laravel controller, Form Request, policy, Eloquent write, or job.
## When to leave it
Stop for PHP ...Review an MCP server for spec compatibility, schema checks, and tool permissions. Use for an MCP security review. Do not use for a generic HTTP API, or to pass a user's token through to an untrusted tool.
# MCP Security Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/mcp-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# MCP Security Review Skill for Cursor
Cursor skill `mcp-security-review` for MCP. Run it with `/mcp-security-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for an MCP server: a new tool, a transport, a spec bump, or "what can this tool do".
## When to leave it
Do not upgrade dependenc...Review a NestJS change for unregistered providers, DTO validation, and unguarded routes. Use for a NestJS security review. Do not use for a non-NestJS TypeScript API or to treat a TypeScript interface as runtime validation.
# NestJS Security Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/nestjs-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# NestJS Security Review Skill for Cursor
Cursor skill `nestjs-security-review` for NestJS. Run it with `/nestjs-security-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for a NestJS controller, module, DTO, or guard.
## When to leave it
Stop for an Express app that does not use N...Review a Next.js App Router change for structure, Server Actions, data fetching, security, and tests. Use for a Next.js code review or a pre-merge check. Do not use for a CSS-only tweak, a non-Next.js repository, or a major upgrade nobody asked for.
# Next.js Code Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/nextjs-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Next.js Code Review Skill for Cursor
Cursor skill `nextjs-code-review` for Next.js. Run it with `/nextjs-code-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for a Next.js change: a pull request, a feature, or a request to "review the app", "check this route", or "look at the server acti...Audit a Node.js service for event-loop blocking, missing cancellation, and unbounded streams or retries. Use for a Node.js performance audit. Do not use for a browser-only bug or a non-Node repository.
# Node.js Performance Audit Skill for Cursor
## Install
Install the native export at `.cursor/skills/nodejs-performance-audit/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Node.js Performance Audit Skill for Cursor
Cursor skill `nodejs-performance-audit` for Node.js. Run it with `/nodejs-performance-audit`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this audit when a Node.js service is slow, timing out, or leaking work after the client disconnects. Also run it...Audit a Nuxt app for duplicate SSR fetches, unstable payload keys, and private runtime config leaking to the client. Use for a Nuxt performance audit. Do not use for a non-Nuxt Vue app or to enable experimental routeTypedFetch unasked.
# Nuxt Performance Audit Skill for Cursor
## Install
Install the native export at `.cursor/skills/nuxt-performance-audit/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Nuxt Performance Audit Skill for Cursor
Cursor skill `nuxt-performance-audit` for Nuxt. Run it with `/nuxt-performance-audit`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this audit when a Nuxt page is slow, double-fetches, hydrates badly, or might be leaking config.
## When to leave it
Stop for...Write a Playwright regression test that reproduces a bug with locators and web-first assertions. Use when the user asks for a Playwright test or an end-to-end case. Do not use for unit tests in another runner or a non-browser bug.
# Playwright Test Writer Skill for Cursor
## Install
Install the native export at `.cursor/skills/playwright-test-writer/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Playwright Test Writer Skill for Cursor
Cursor skill `playwright-test-writer` for Playwright. Run it with `/playwright-test-writer`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this when the user wants a Playwright test, a regression for a UI bug, or an end-to-end case. The result is a spec that f...Review a Prisma schema, migration, or query for data loss, N+1 reads, and unsafe raw SQL. Use for a Prisma code review. Do not use to apply a migration to production or to upgrade onto the Prisma 8 release candidate.
# Prisma Code Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/prisma-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Prisma Code Review Skill for Cursor
Cursor skill `prisma-code-review` for Prisma. Run it with `/prisma-code-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for a Prisma schema change, a migration, a query, or "is this safe to migrate".
## When to leave it
Stop if the user asks you to ap...Add or extend pytest coverage for a Python change, using the project's uv environment and Ruff. Use when the user asks for Python tests or a failing case. Do not use for a non-Python repository or to upgrade the interpreter unasked.
# Python Test Writer Skill for Cursor
## Install
Install the native export at `.cursor/skills/python-test-writer/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Python Test Writer Skill for Cursor
Cursor skill `python-test-writer` for Python. Run it with `/python-test-writer`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this when the user asks for tests, a regression case, or coverage for a Python change. Write pytest tests against the behavior, using the project...Review a Rails change for authorization, strong parameters, query counts, and job retries. Use for a Rails code review. Do not use for a non-Rails Ruby script or to migrate production.
# Rails Code Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/rails-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Rails Code Review Skill for Cursor
Cursor skill `rails-code-review` for Rails. Run it with `/rails-code-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for a Rails model, controller, migration, or job.
## When to leave it
Stop for Ruby that is not Rails. Do not upgrade Rails or migrate pr...Audit a React UI for wasted renders, effect loops, hydration mismatches, and heavy client work. Use for a React performance audit or a slow-page review. Do not use for a non-React codebase or a styling-only tweak.
# React Performance Audit Skill for Cursor
## Install
Install the native export at `.cursor/skills/react-performance-audit/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# React Performance Audit Skill for Cursor
Cursor skill `react-performance-audit` for React. Run it with `/react-performance-audit`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this audit when a React screen is slow, janky, or re-rendering more than the interaction needs. Also run it for "why is t...Loading all presets…