cursor-kenji ships 90 Cursor agent skills, 13 slash commands, and 5 subagents for React / Next.js / Supabase projects. Install once — describe a task in chat and the matching skill auto-triggers.

Skills conform to the Agent Skills specification and pass automated validation on every commit (npm test — 102 installable skills including Cursor IDE tools). MCP templates pin semver versions to reduce supply-chain drift (CSA on package hallucination / slopsquatting).

npx skills add kensaurus/cursor-kenji

Restart Cursor. Done.

No Cursor? Download Cursor · No skills CLI? npm install -g skills first, or use manual install below.

Quick Start

| Method | Command | |:-------|:--------| | skills.sh (recommended) | npx skills add kensaurus/cursor-kenji | | npm installer | npx @kensaurus/cursor-kenji | | Clone | git clone … && ./install.sh |

npm installer modes:

npx @kensaurus/cursor-kenji            # merge — add/overwrite this repo's items
npx @kensaurus/cursor-kenji --clean    # mirror ~/.cursor to match this repo (backup first)
npx @kensaurus/cursor-kenji --dry-run  # preview
npx @kensaurus/cursor-kenji --skill audit-ux   # single skill
npx @kensaurus/cursor-kenji --link     # dev: symlink for live skill authoring

From a clone: npm run install:cursor · npm test validates skills + count + install smoke test.

Optional — Mushi Mushi bug-report triage + AI draft PRs (pairs with mushi-health, test-playwright):

npx skills add kensaurus/mushi-mushi

After install: (1) Restart Cursor (2) Copy mcp/mcp.json.template → ~/.cursor/mcp.json, fill YOUR_* keys (3) Describe any task — skills match on keywords.

Authoring skills? Each skill must pass Agent Skills spec validation (npm run validate:skills): name matches directory, description ≤ 1024 chars, body < 500 lines.

Claude Code (bash installer only)

The npm and skills.sh installers target Cursor only. For Claude Code, clone the repo and use install.sh:

All skills, agents, and rules install to Claude Code (~/.claude/). Skills appear as /slash-commands — type / inside any claude session.

# Install for Claude Code only
./install.sh --claude

# Install for both Cursor and Claude Code (default)
./install.sh

# Inside Claude Code — use skills as slash commands
/workflow-build-feature
/debug-error the login endpoint returns 401
/plan-security-audit
/docs-writer

Skills are read from ~/.claude/skills/<name>/SKILL.md. No restart required when you re-run the installer — Claude Code picks up file changes at the start of each new session.

Manual install

git clone https://github.com/kensaurus/cursor-kenji.git && cd cursor-kenji && ./install.sh

curl -sSL https://raw.githubusercontent.com/kensaurus/cursor-kenji/main/install.sh | bash

Keep fresh: npx skills add kensaurus/cursor-kenji or git pull && ./install.sh

What's Inside

| | Count | What it does | |:--|------:|:-------------| | Skills | 90 | Auto-triggering capabilities (audit, enhance, debug, test, build, plan) | | Cursor Skills | 12 | IDE tools (canvas, hooks, rules, PR splitter) | | Commands | 13 | Slash workflows (/commit, /pr, /research) | | Subagents | 5 | Background agents (code-reviewer, debugger, db-migrator…) | | MCP Servers | 16 | Supabase · GitHub · Sentry · Playwright · AWS · Slack | | Project Rules | 6 | Drop-in .mdc for .cursor/rules/ (plus 3 global, 5 RN bundle optional) | | Notepads | 2 | Context templates (architecture, design tokens) | | Shell Aliases | 8 | newskill, cursor-sync, gc, gp |

Full skill list + trigger phrases → docs/CATALOG.md · Plain lookup → docs/TRIGGER-CHEATSHEET.md

Workflows

Skills chain bundled workflows from onboarding through ship; plan-* skills audit first — you approve each phase before anything changes.

flowchart LR
  U["Understand<br/>workflow-onboard · /research"] --> C["Clean<br/>workflow-housekeep"]
  C --> M["Measure<br/>audit-*"]
  M --> P["Plan<br/>plan-* · /plan"]
  P --> CH["Change<br/>workflow-spec-tdd"]
  CH --> V["Verify<br/>test-playwright · test-unit"]
  V --> S["Ship<br/>/commit · /pr"]
  S -.-> M

  style U fill:#064e3b,stroke:#10b981,color:#d1fae5
  style M fill:#3b0764,stroke:#a78bfa,color:#ede9fe
  style P fill:#064e3b,stroke:#10b981,color:#d1fae5
  style S fill:#1e3a5f,stroke:#60a5fa,color:#dbeafe

Bundled workflows

| Say this | Bundle | What runs | |----------|--------|-----------| | "build a feature" | workflow-build-feature | spec → TDD → unit → smoke → PR | | "fix this and ship" | workflow-fix-and-ship | debug → fix → regression → PR → deploy | | "is this ready?" | workflow-quality-gate | red-team → security → bundle → perf → unit | | "prepare for launch" | workflow-launch-ready | SEO + PWA + bundle + i18n + quality gate | | "orient me" | workflow-onboard | codebase briefing in ~5 min |

Plan loops (audit only — approve before execution)

17 plan-* skills in grouped loops — see docs/PLAN-LOOPS.md for diagrams, slash aliases (/uiux-plan, /capacitor-plan, …), and execution mapping.

| Loop | Skills | When | |------|--------|------| | Six-skill | uiux → stub → test-coverage → perf ∥ security → docs-sync | Inherited codebase / UI hardening | | Pre-launch hardening | input-validation → secrets → RLS → data-integrity → dependency-provenance | Supabase/Stripe, pre-open-source | | Observability & spend | error-handling + llm-cost-guardrails | LLM features, Sentry/Langfuse gaps | | Mobile gate | capacitor-hardening → mobile-readiness | Capacitor/hybrid pre-store | | Growth gate | aeo-readiness | AI citation visibility |

One-shot (six-skill plan only):

Run the six-skill plan loop — no changes until I approve each phase:
plan-uiux-unification → plan-stub-checker → plan-test-coverage →
plan-perf-audit + plan-security-audit (parallel) → plan-docs-sync.

More copy-paste recipes (adopt repo, de-slop a page, pre-launch sweep, split PRs) → docs/CATALOG.md#skill-composition-patterns · New to Cursor? → docs/GETTING-STARTED.md

How to Use

| Primitive | Invoke | Example | |:----------|:-------|:--------| | Skill | Describe the task | "audit my security" → audit-security | | Command | /name in chat | /commit, /research, /pr | | Subagent | Mention trigger keyword | "review this PR" → code-reviewer | | Rule | Copy .mdc into project | Always-on conventions |

Force a skill: "use enhance-web-ux on /dashboard"

Skill taxonomy

Every skill is <prefix>-<topic>. Full entries with triggers → docs/CATALOG.md.

| Prefix | Purpose | Examples | |:-------|:--------|:---------| | audit- | Read-only assessments | audit-security, audit-performance, audit-langfuse-llm | | plan- | Audit-and-plan burndowns (17 skills) | plan-stub-checker, plan-capacitor-hardening, plan-rls-audit | | enhance- | Improve existing UI/UX/SEO/PWA | enhance-web-ux, enhance-web-ui, enhance-pwa | | workflow- | Process bundles | workflow-spec-tdd, workflow-build-feature, workflow-housekeep | | test- | QA and unit tests | test-playwright, test-red-team, test-unit | | debug- | Failures and integration | debug-error, debug-fe-be-integration | | backend- | Server patterns | backend-patterns, backend-observability | | mobile- | RN / Capacitor / emulator | mobile-rn-screen, mobile-capacitor-platform | | design- | New surfaces | design-frontend, design-prd, design-system | | deploy- | Release verify | deploy-verify, deploy-npm | | docs- | Documentation | docs-writer, docs-coauthor | | meta- | Author skills/MCP | meta-skill-creator, meta-mcp-builder | | protocol- | Session guardrails | protocol-browser-anti-stall | | mushi- | Mushi Mushi integration | mushi-health, mushi-integration |

Note: Anthropic file-docx/pdf/pptx/xlsx skills are not in this public repo. Keep personal copies in ~/.cursor/skills/ if needed.

Cursor-specific skills (12): babysit, canvas, create-hook, create-rule, create-skill, split-to-prs, … — see CATALOG.md.

Commands (13)

| Command | When | What | |:--------|:-----|:-----| | /plan | Before coding | Research + approved plan | | /commit | After coding | Lint, typecheck, commit | | /pr | Ready to ship | Push + open PR | | /fix-issue [#] | Bug reports | Issue → fix → PR | | /debug | Tricky bugs | Instrumented debugging | | /review | Before merge | Agent + manual review | | /test | Before commit | Test suite + coverage | | /update-deps | Maintenance | Safe dep updates | | /research | Before coding | Firecrawl doc research | | /readme | End of session | Sync READMEs | | /refactor | Long files | Modular split | | /mcp | MCP workflow | Tool reference | | /uiux | UI review | Design-system enforcement |

RN monorepo bundle: copy commands/native-rn-monorepo/ + rules/native-rn-monorepo/ into your project (iOS builds on CI, not locally).

Subagents (5)

| Agent | Triggers on | Output | |:------|:------------|:-------| | code-reviewer | "review", code changes | Quality, security, types | | debugger | Errors, exceptions | Root cause + fix | | db-migrator | "migration", "new table" | SQL, RLS, indexes | | deploy-checker | "deploy", "ship it" | Pre-deploy validation | | perf-monitor | "slow", "optimize" | Perf audit |

MCP servers (16)

cp ~/cursor-kenji/mcp/mcp.json.template ~/.cursor/mcp.json      # essential 5
cp ~/cursor-kenji/mcp/mcp-full.json.template ~/.cursor/mcp.json  # all 16

Replace YOUR_* placeholders with real keys. Setup details → mcp/README.md

| Tier | Servers | Keys? | |:-----|:--------|:------| | Essential | Sequential Thinking, Context7, Firecrawl, Supabase, Playwright | Firecrawl + Supabase | | Dev | GitHub, Playwright, Postgres, Memory | PAT / conn string | | Cloud | AWS Lambda, S3, CloudWatch, Redis | AWS profile / URL | | Productivity | Slack, Notion | Bot token / API key |

Project rules

cp ~/cursor-kenji/rules/project-starter/*.mdc your-project/.cursor/rules/

| Rule | Enforces | |:-----|:---------| | supabase.mdc | Typed clients, RLS, migrations | | typescript.mdc | No any, Zod, ActionResult | | components.mdc | Primitives, Server Components, a11y | | tailwind.mdc | Tokens, mobile-first | | git.mdc | Conventional commits, no secrets |

Global rules in this repo: full-stack-ship-discipline.mdc, composer-2.5-execution.mdc, skill-workflows.mdc.

Plan with a strong model, execute with Composer 2.5. The 17 plan-* skills are authored/reviewed with a stronger reasoning model; composer-2.5-execution.mdc constrains how approved plans are implemented.

Project constitution: copy docs/AGENTS.template.md to your app repo as AGENTS.md for always-on agent discipline.

Shell helpers

source ~/cursor-kenji/shell-aliases/cursor-helpers.sh

| Command | Action | |:--------|:-------| | newskill <name> | Create skill template | | lsskills | List installed skills | | cursor-sync | Pull repo + reinstall | | cursor-dev | Open Chrome (debug port) + Cursor | | newrule <name> | Create project rule template | | newagent <name> | Create subagent template | | gc <type> <msg> | Conventional commit | | gp | Push current branch |

Full definitions in shell-aliases/cursor-helpers.sh (clone-only; not in npm tarball).

Repository layout

cursor-kenji/
├── skills/           # 90 Agent Skills (SKILL.md each)
├── skills-cursor/    # 12 Cursor-specific skills
├── commands/         # 13 slash commands
├── agents/           # 5 subagents
├── rules/            # Global + project-starter rules
├── mcp/              # MCP templates
├── docs/             # CATALOG, PLAN-LOOPS, GETTING-STARTED, …
├── notepads/         # Context templates (clone-only)
├── shell-aliases/    # Bash helpers (clone-only)
├── scripts/          # validate-skills, check-skill-count, install tests
└── bin/install.mjs   # npm installer

Design principles

| # | Principle | Enforced by | |---|:----------|:------------| | 1 | Check existing first | workflow-housekeep, plan-stub-checker | | 2 | CI-validated examples | workflow-spec-tdd, skill validation CI | | 3 | Modular & composable | skill-workflows.mdc, bundled workflows | | 4 | Audit before change | 17 plan-* skills, /plan | | 5 | Verify end-to-end | full-stack-ship-discipline.mdc, test-playwright | | 6 | Accessible by default | audit-accessibility, project-starter rules | | 7 | Performance aware | audit-performance, audit-bundle-size |

Contributing

mkdir -p skills/my-skill && vim skills/my-skill/SKILL.md
npm run test   # validate + count + install smoke

See CONTRIBUTING.md, docs/README.md, docs/DISTRIBUTION.md, llms.txt, docs/CATALOG.md, docs/TRIGGER-CHEATSHEET.md.

FAQ

What is cursor-kenji?
A installable toolkit of Agent Skills-compatible markdown skills, slash commands, subagents, and MCP templates for Cursor. One command installs everything into ~/.cursor/ and ~/.agents/skills/.

How do I install?
npx skills add kensaurus/cursor-kenji (recommended) or npx @kensaurus/cursor-kenji. Restart Cursor after install.

How many skills?
90 agent skills in skills/ plus 12 Cursor-specific skills in skills-cursor/ (102 total). Counts are derived from the filesystem and synced by npm run check:skills.

How do skills trigger?
Cursor matches your chat message against each skill's YAML description keywords. Force one with "use `audit-security` on this repo". Full trigger list: docs/CATALOG.md.

What's the difference between audit-* and plan-*?
audit-* skills assess and may fix inline. plan-* skills produce a plan-{name}.md burndown only — you approve each phase before any code changes. See docs/PLAN-LOOPS.md.

Where do MCP API keys go?
Copy mcp/mcp.json.template to ~/.cursor/mcp.json and fill YOUR_* placeholders — never commit real keys. See SECURITY.md and mcp/README.md.

Is there machine-readable docs for AI crawlers?
Yes — llms.txt at the repo root links to canonical docs surfaces.

Alternatives

• awesome-cursorrules — curated rules collections
• skills.sh — skills registry (npx skills add kensaurus/cursor-kenji)
• agentskills.io — Agent Skills spec + index
• npm · Cursor Marketplace · cursor.directory

cursor-kenji ships executable skills, MCP configs, commands, and subagents in one installable package — not static rules alone. Full listing status → docs/DISTRIBUTION.md.

Also by @kensaurus

Mushi Mushi — shake-to-report bugs, AI triage, optional draft PR. npx mushi-mushi · pairs with mushi-health, debug-sentry-monitor, test-playwright.

| App | Links | |:----|:------| | glot.it — Learn Thai | iOS · Android | | yen-yen — Expense Tracker | iOS · Android | | Help Her Take Photo | iOS · Android | | The Wanting Mind — Free Book | iOS · Android |