Cursor Kenji
by @kensaurus · plugin · 92 skills
Cursor Kenji from kensaurus/cursor-kenji.
Install the whole plugin (CLI)
npx skillmds add kensaurus/handoff
npx skillmds add kensaurus/test-qa
npx skillmds add kensaurus/audit-ux
npx skillmds add kensaurus/docs-adr
npx skillmds add kensaurus/grilling
npx skillmds add kensaurus/plan-aso
npx skillmds add kensaurus/test-load
npx skillmds add kensaurus/test-unit
npx skillmds add kensaurus/audit-cicd
npx skillmds add kensaurus/audit-i18n
npx skillmds add kensaurus/deploy-npm
npx skillmds add kensaurus/design-api
npx skillmds add kensaurus/design-prd
npx skillmds add kensaurus/debug-error
npx skillmds add kensaurus/docs-writer
npx skillmds add kensaurus/enhance-pwa
npx skillmds add kensaurus/workflow-pr
npx skillmds add kensaurus/audit-fe-api
npx skillmds add kensaurus/design-email
npx skillmds add kensaurus/design-theme
npx skillmds add kensaurus/mushi-health
npx skillmds add kensaurus/burndown-full
npx skillmds add kensaurus/data-pipeline
npx skillmds add kensaurus/deploy-verify
npx skillmds add kensaurus/design-canvas
npx skillmds add kensaurus/design-motion
npx skillmds add kensaurus/design-system
npx skillmds add kensaurus/docs-coauthor
npx skillmds add kensaurus/plan-antislop
npx skillmds add kensaurus/test-mutation
npx skillmds add kensaurus/test-red-team
npx skillmds add kensaurus/audit-security
npx skillmds add kensaurus/enhance-motion
npx skillmds add kensaurus/enhance-readme
npx skillmds add kensaurus/enhance-web-ui
npx skillmds add kensaurus/enhance-web-ux
npx skillmds add kensaurus/plan-backup-dr
npx skillmds add kensaurus/plan-docs-sync
npx skillmds add kensaurus/plan-rls-audit
npx skillmds add kensaurus/audit-analytics
npx skillmds add kensaurus/audit-db-schema
npx skillmds add kensaurus/audit-realworld
npx skillmds add kensaurus/audit-ui-states
npx skillmds add kensaurus/design-frontend
npx skillmds add kensaurus/domain-modeling
npx skillmds add kensaurus/enhance-web-seo
npx skillmds add kensaurus/housekeep-gates
npx skillmds add kensaurus/plan-perf-audit
npx skillmds add kensaurus/test-playwright
npx skillmds add kensaurus/audit-auth-flows
npx skillmds add kensaurus/audit-env-parity
npx skillmds add kensaurus/audit-gate-logic
npx skillmds add kensaurus/audit-infra-cost
npx skillmds add kensaurus/audit-resilience
npx skillmds add kensaurus/audit-responsive
npx skillmds add kensaurus/backend-patterns
npx skillmds add kensaurus/backend-realtime
npx skillmds add kensaurus/housekeep-design
npx skillmds add kensaurus/meta-mcp-builder
npx skillmds add kensaurus/mobile-rn-screen
npx skillmds add kensaurus/test-exploratory
npx skillmds add kensaurus/workflow-onboard
npx skillmds add kensaurus/audit-bundle-size
npx skillmds add kensaurus/audit-code-review
npx skillmds add kensaurus/audit-performance
npx skillmds add kensaurus/audit-ux-journeys
npx skillmds add kensaurus/enhance-web-forms
npx skillmds add kensaurus/enhance-web-web3d
npx skillmds add kensaurus/mushi-integration
npx skillmds add kensaurus/plan-stub-checker
npx skillmds add kensaurus/workflow-refactor
npx skillmds add kensaurus/workflow-spec-tdd
npx skillmds add kensaurus/audit-code-quality
npx skillmds add kensaurus/audit-langfuse-llm
npx skillmds add kensaurus/audit-llm-security
npx skillmds add kensaurus/data-visualization
npx skillmds add kensaurus/meta-skill-creator
npx skillmds add kensaurus/plan-aeo-readiness
npx skillmds add kensaurus/plan-secrets-audit
npx skillmds add kensaurus/plan-test-coverage
npx skillmds add kensaurus/workflow-housekeep
npx skillmds add kensaurus/audit-accessibility
npx skillmds add kensaurus/complete-everything
npx skillmds add kensaurus/design-mobile-first
npx skillmds add kensaurus/enhance-web-landing
npx skillmds add kensaurus/iterate-post-launch
npx skillmds add kensaurus/plan-data-integrity
npx skillmds add kensaurus/plan-error-handling
npx skillmds add kensaurus/plan-security-audit
npx skillmds add kensaurus/workflow-git-commit
npx skillmds add kensaurus/workflow-green-repo
npx skillmds add kensaurus/audit-codemod-safetySkills in this plugin
- ▌ handoff · kensaurusCompact the current conversation into a handoff document a fresh agent can pick up. User-invoked via /handoff; an optional argument describes what the next session will focus on.
- ▌ test-qa · kensaurus bundleGeneric webapp QA fallback — use only when no project-specific QA skill applies (project-local QA wins; native builds → mobile-emulator-test). Use when "QA the app", "test CRUD", or "smoke test". Monkey / guest vs logged-in → test-exploratory. Dead buttons → plan-stub-checker. Pixel diffs → test-visual-regression.
- ▌ audit-ux · kensaurus bundlePer-page UX audit using NN/g heuristics, Intuit microcopy, and Google HEART. Use when evaluating usability, auditing microcopy, checking UX heuristics, or assessing cognitive load. Cross-page flows/IA → audit-ux-journeys. Layout/breakpoints → audit-responsive. Empty/error states → audit-ui-states.
- ▌ docs-adr · kensaurusCreate and maintain lightweight Architecture Decision Records as agent-readable decision memory — what was decided, why, and which alternatives were rejected. Use when "record this decision", "set up ADRs", "the agent keeps suggesting Y again". Docs vs code drift → plan-docs-sync. Session state → handoff.
- ▌ grilling · kensaurusGrill the user relentlessly about a plan, decision, or idea — one question at a time — until shared understanding is reached. Use when the user says "grill me", "stress-test this plan", "interview me about this", "poke holes in this", "challenge my thinking", or before committing to a non-trivial design.
- ▌ plan-aso · kensaurusAudit App Store and Google Play listings for discoverability and conversion — keywords, localized metadata, screenshots, ratings prompts — then emit a prioritized ASO plan. Use when "optimize our store listing", "improve app downloads", or "ASO". Submission mechanics → plan-mobile-readiness. Plan only.
- ▌ test-load · kensaurusDesign and run a k6/Artillery load profile that measures throughput, latency percentiles, error rate, and the breaking point under concurrent traffic. Use when "load test this", "will it handle launch traffic", or "find the breaking point". Resilience-by-reading-code → audit-resilience. Never hit prod unsigned.
- ▌ test-unit · kensaurus bundleWrite effective unit tests with best practices for any project. Use when writing tests, creating test cases, improving test coverage, increasing confidence before release, or when the user mentions testing. Mutation score / assertion theater → test-mutation.
- ▌ audit-cicd · kensaurusAudit CI/CD pipelines (GitHub Actions) for cost, speed, and safety. Use when the Actions bill is high, Actions minutes, runner cost, slow CI, artifact/cache storage, or "CI/CD / workflow audit". Gate logic (bypass, ratchet gaming, required-but-not) → audit-gate-logic.
- ▌ audit-i18n · kensaurusAudit and fix internationalisation for any web or mobile app. Use when asked to "audit i18n", "fix translations", "add locale", "natural language", "translation quality", "hardcoded strings", "localisation", or "the Japanese feels like Google Translate".
- ▌ deploy-npm · kensaurus bundleRelease npm packages end-to-end: Changesets version bump, CHANGELOG update, GitHub Actions OIDC publish, and post-release verification. Use when the user says "release to npm", "publish this package", "ship a new version", "cut a release", "update the changelog", or combines a package name with a release verb.
- ▌ design-api · kensaurusDesign RESTful and GraphQL APIs following current best practices for naming, versioning, error shapes, and auth patterns. Use when the user says "design an API", "create endpoints", "structure my API responses", "plan API architecture", "REST vs GraphQL", or "API contract".
- ▌ design-prd · kensaurusGenerate Product Requirements Documents through structured conversation for any project. Use when starting a new feature, documenting requirements, creating specs before implementation, or needing clarity on scope and success criteria.
- ▌ debug-error · kensaurusSystematic debugging workflow for errors and bugs. Use when debugging errors, investigating bugs, troubleshooting issues, or when something isn't working as expected. Integrates Sentry MCP for production error context, Firecrawl for researching fix patterns, and Sequential Thinking for complex multi-step diagnosis.
- ▌ docs-writer · kensaurusWrite clear, developer-friendly documentation — READMEs, API references, code comments, and changelog entries — tailored to the audience and the project's voice. Use when the user says "write docs", "document this API", "update the README", "add code comments", "changelog entry", or "explain this for contributors".
- ▌ enhance-pwa · kensaurusAdd or upgrade PWA features to any web app: service worker, offline mode, install prompt, push notifications, and background sync. Use when asked to "make it a PWA", "offline support", "install prompt", "push notifications", "service worker", "add to home screen", "background sync", "Lighthouse PWA score", "app-like.
- ▌ workflow-pr · kensaurusManage the full PR lifecycle — create, review, address bot feedback, resolve conflicts, and merge. Use when creating pull requests, managing PR reviews, addressing bot feedback, or merging PRs.
- ▌ audit-fe-api · kensaurusAudit frontend API calls against backend implementation for contract alignment and network shape. Use when "API audit", "FE-BE contract", or "review frontend API integration". Live 4xx/5xx reproduction → debug-fe-be-integration.
- ▌ design-email · kensaurusDesign and implement transactional and marketing email templates. Use when asked to "build an email template", "transactional email", "welcome email", "password reset email", "email design", "React Email", "MJML", "dark mode email", or "email copy review". Inbox / SPF / spam → enhance-email-deliverability.
- ▌ design-theme · kensaurus bundleApply cohesive visual themes to artifacts (slides, docs, landing pages). Provides 11 pre-set themes with colors/fonts. Use when user mentions "apply theme", "color palette", "brand colors", "styling slides", "presentation design", "visual identity", or wants consistent styling across artifacts.
- ▌ mushi-health · kensaurusPass/fail health check across every Mushi Mushi pipeline component — CLI credentials, API reachability, edge functions, BYOK key pool, QA cron. Use when "is mushi working", "mushi health check", "check mushi pipeline", "mushi deploy check", "pipeline not responding", or right after setup.
- ▌ burndown-full · kensaurusDrive a planned change to 100% coverage across an entire codebase when a prior agent run stopped early. Use whenever a refactor, migration, rename, rule-application, or sweeping edit was planned and partially executed but left incomplete — i.e.
- ▌ data-pipeline · kensaurusWire ETL, ingestion, cron, edge-function, and queue jobs correctly. Use for "build a pipeline", "sync X into Y", "nightly aggregation", "cron double-counts", "dedupe", "backfill", "the numbers are wrong after a retry". Bakes in idempotency, atomic writes, data contracts, dead-letter, and observability.
- ▌ deploy-verify · kensaurusPost-deploy smoke test combining all 5 tools (Sentry + Supabase + Firecrawl MCPs, plus the Langfuse and Playwright CLIs) into one workflow. Use when asked to: "verify deploy", "post-deploy check", "smoke test production", "check if deploy is healthy", "ship or rollback", "post-release check", "verify release", "deploy.
- ▌ design-canvas · kensaurusCreate museum-quality visual art in .png and .pdf formats using design philosophy. Use when user asks for poster, visual design, infographic, certificate, badge, banner, social media graphic, print design, or mentions "create artwork", "design graphic", "visual identity", or "print material".
- ▌ design-motion · kensaurus bundleDesign and implement new isolated motion — micro-interactions, page transitions, scroll, hover — with Framer Motion, CSS, or GSAP. Use when adding one animation to a new surface. Existing-app coherent pass → enhance-motion. Do not fire for "motion pass across the app".
- ▌ design-system · kensaurusBuild and maintain cohesive design systems and component libraries with tokens, theming, and documented variants. Use when the user says "design system", "component library", "design tokens", "theming", "consistent styling", "reusable components", or "variant props".
- ▌ docs-coauthor · kensaurusCo-author structured documents (specs, PRDs, RFCs) through a 3-stage workflow: context gathering, drafting, and reader testing. Use when writing proposals, technical specs, or similar structured content. Repo decision-memory system (INDEX.md, rejected alternatives, agent rules) → docs-adr.
- ▌ plan-antislop · kensaurusAudit a codebase, UI, or copy for machine-generated tells across prose, visual/UI, code, and structure/IA, then produce a phased de-slop burndown. Use when the user says "feels AI-generated", "looks like AI slop", "reads like ChatGPT", "feels generic/soulless", or wants an authenticity/voice pass before launch.
- ▌ test-mutation · kensaurusSet up and run mutation testing (StrykerJS / mutmut) to measure whether tests assert behavior, not just execute lines. Use when "add mutation testing", "are our tests real", "can our test suite be gamed", or after an agent bulk-generated tests. Coverage plan → plan-test-coverage. Writing tests → test-unit.
- ▌ test-red-team · kensaurus bundleAdversarial red-team of a running web, React Native, or Capacitor hybrid app. Use when asked to "red team this app", "attack my app", "break it", "find all the defects", "adversarial test", "pre-launch hardening", "pentest the app", or "full app QA". Naive monkey / guest vs logged-in wander → test-exploratory.
- ▌ audit-security · kensaurusStatic OWASP review of app code (injection, headers, deps). Use when "review security" or "check vulnerabilities". Session/route×gate/getSession → audit-auth-flows. Plan-only burndown → plan-security-audit. Table RLS → plan-rls-audit. LLM attacks → audit-llm-security.
- ▌ enhance-motion · kensaurusAudit an existing app's design system and motion, then apply a coherent, performant, reduced-motion-safe pass. Use when "motion pass", "animate the app", or "add micro-interactions across the app". One new isolated animation → design-motion.
- ▌ enhance-readme · kensaurus bundleTurn a plain-text README into a visually rich showcase with a theme-aware hero image, a feature tour grid, an optional animated guided-tour GIF, and updated tech badges. Use when asked to "enhance README", "make README prettier", "add screenshots to README", "showcase the app in README", "design the README", "add hero.
- ▌ enhance-web-ui · kensaurus bundleArtistic, research-grounded UI enhancement for making an existing page feel intentional, spacious, and human-crafted. Use when "make this page nicer/polished/premium/editorial", less crowded, better laid out, typography, or visual hierarchy. Flows/AI-templated UX → enhance-web-ux. Layout contract → audit-responsive.
- ▌ enhance-web-ux · kensaurus bundleNN/g-grounded page enhancement for flows and semantic data wiring — not visual polish. Use when "this page feels AI-generated", "fix UX of /xxx", "improve information density", or "icons all look the same". Composition/type → enhance-web-ui. Heuristics-only → audit-ux.
- ▌ plan-backup-dr · kensaurusAudit whether a project can actually recover from data loss — not just whether backups exist — then emit a phased DR plan. Use when "can we recover if the DB dies", "audit our backups", "what's our RPO/RTO", or "disaster recovery". Plan only. Destructive-op gates stay on plan-data-integrity.
- ▌ plan-docs-sync · kensaurus bundleAudit documentation against actual code behavior and plan corrections — no rewrites in this pass. Use when asked to "docs drift", "sync docs with code", "audit documentation", "stale README", "onboarding docs broken", "doc sync plan", "phantom docs", or "docs out of date". Why-we-chose-X / ADRs → docs-adr.
- ▌ plan-rls-audit · kensaurusAudit a Supabase/Postgres project for Row-Level Security and access-control gaps, then produce a phased remediation plan. Use when "RLS", "is my Supabase secure", "anyone can read my data", "lock down my tables". App-layer session/route gates → audit-auth-flows.
- ▌ audit-analytics · kensaurusRead-only audit of product-analytics instrumentation: event taxonomy, funnel completeness, consent-gated firing, dead/duplicate/phantom events. Use when "audit our analytics", "are we tracking the right events", "funnel instrumentation", or before iterate-post-launch. PostHog/Amplitude/Mixpanel/GA4.
- ▌ audit-db-schema · kensaurus bundleAudit database schema for consistency, validation, and industry standards. Use when reviewing schema design, naming conventions, constraints, indexes, or migrations. Destructive-op gates → plan-data-integrity. Who-can-read-what RLS → plan-rls-audit. Restore/RPO → plan-backup-dr.
- ▌ audit-realworld · kensaurusAudit a full-stack app against the RealWorld ("Conduit") reference — its formal API spec, shared Bruno/Hurl E2E suite, and closest-stack reference implementation — to find what is. Use when "audit against realworld", "compare my app to realworld", "conduit conformance", "is my full-stack app complete", "full-stack gap.
- ▌ audit-ui-states · kensaurusRead-only audit of unhappy-path UI states vibe-coding skips — empty, loading, error, offline, zero-results, permission, overflow — then plan fixes. Use when "check empty/error states", "audit loading states", or "what happens when this fails". Dead buttons → plan-stub-checker; backend timeouts → audit-resilience.
- ▌ design-frontend · kensaurusCreate distinctive, production-grade frontend interfaces that avoid generic AI aesthetics. Use when the user says "build this UI", "design this page", "make it look good", "dashboard layout", "beautify this", or "make the UI feel premium".
- ▌ domain-modeling · kensaurusBuild and sharpen a project's domain model — a CONTEXT.md glossary and ubiquitous language. Use when pinning down terminology, or the agent "uses the wrong words". Repo decision-memory system (INDEX.md, rejected alternatives) → docs-adr.
- ▌ enhance-web-seo · kensaurusAudit and fix SEO for any web app. Use when asked to "improve SEO", "add meta tags", "fix search ranking", "add structured data", "sitemap", "canonical URLs", "Open Graph", "Google indexing", "rich results", "SEO audit", or "why is my site not ranking".
- ▌ housekeep-gates · kensaurusApply-now consolidation of accreted CI gates, ratchets, and hooks into one aggregator required check. Use after audit-gate-logic, or when "clean up our CI checks", "we have three lint jobs", "make one quality gate". Audit-only → audit-gate-logic. Pipeline cost → audit-cicd.
- ▌ plan-perf-audit · kensaurus bundleMeasure-don't-guess performance audit across web, mobile, backend, and data layers — produces burndown and optimization plan with no fixes in this pass. Use when asked to "performance audit plan", "perf burndown", "measure before optimize", "bundle size audit", "LCP slow", "N+1 audit plan", "plan performance.
- ▌ test-playwright · kensaurusClose the PDCA loop on this session's diff. Headed playwright-cli, fix as you go. Use when "test my changes", "PDCA this". Pixel diffs → test-visual-regression. Story CRUD → test-qa. Monkey / guest vs logged-in → test-exploratory.
- ▌ audit-auth-flows · kensaurusRead-only audit of app-layer auth — route×gate matrix, session lifecycle, OAuth, and provider traps (getSession vs getUser, middleware-as-only-gate, CVE-2025-29927). Use when "audit our auth", "check middleware protection". RLS → plan-rls-audit. OWASP checklist → audit-security.
- ▌ audit-env-parity · kensaurusRead-only audit of config/env parity across dev, staging, and prod — missing or misnamed vars, drifted flags, hardcoded values, secrets reused across environments. Use when "works locally but not in prod", "audit our environments", or "config drift". Local runnability → workflow-environment-ready.
- ▌ audit-gate-logic · kensaurusRead-only audit of CI gate logic — silent bypass, ratchet gaming, conflicting conditions, required checks that are not, and accreted duplicate gates. Use when "can CI be bypassed", "why did a regression pass CI", "we have too many overlapping checks". Cost/speed → audit-cicd. Consolidation → housekeep-gates.
- ▌ audit-infra-cost · kensaurusRead-only audit of hosting, database, storage, egress, and serverless spend (Supabase, Vercel, S3/R2, edge). Use when "hosting bill is high", "cut infra costs", or a bill jumps. CI minutes → audit-cicd. Model tokens → plan-llm-cost-guardrails. Consumes test-load numbers.
- ▌ audit-resilience · kensaurusRead-only audit for the non-functional "20%" AI agents systematically skip: timeouts, retries with backoff+jitter, circuit breakers, idempotency keys, rate limiting, graceful. Use when "is this production-ready", "resilience audit", "will this survive real traffic", "audit retries/timeouts/idempotency", "reliability.
- ▌ audit-responsive · kensaurus bundleAudit-and-fix linearized mobile layouts at every breakpoint — desktop is not a wide phone. Use when "responsive audit", desktop looks stacked/stretched, no max-width, breakpoint gaps, or 1440 looks like a phone. Distinct from design-mobile-first (touch/mobile-up) and audit-ux-journeys (cross-page IA).
- ▌ backend-patterns · kensaurus bundleApply modern backend patterns — auth middleware, caching strategies, background queues, rate limiting, and serverless/edge function design — across stacks (examples use Next.js. Use when the user says "backend architecture", "queue jobs", "caching layer", "rate limiting", "server actions", "edge function".
- ▌ backend-realtime · kensaurus bundleImplement real-time features using WebSockets, Supabase Realtime, Server-Sent Events, and live data. Use when user wants "real-time", "live updates", "WebSocket", "notifications", "chat", "collaborative", "presence", "live data", or "instant sync".
- ▌ housekeep-design · kensaurusApply-now consolidation of a drifted design system into one token/component SSOT. Use after an approved plan-uiux-unification pass, or when "clean up the design system now", "migrate to one button", or "resolve token conflicts". Plan-only burndown → plan-uiux-unification.
- ▌ meta-mcp-builder · kensaurusScaffold and implement Model Context Protocol (MCP) servers that expose external services, APIs, and data sources as typed tools and resources for LLM agents. Use when the user says "build an MCP server", "give Claude access to X", "create an MCP tool", "expose my API to an agent", or "AI agent integration".
- ▌ mobile-rn-screen · kensaurus bundlePolish an existing React Native screen to feel intentional, native, and human-crafted. Use for "this screen looks off", "feels clunky on iOS", "Android version looks wrong", "jank when scrolling", "button is unreachable", or any RN-specific UX polish pass.
- ▌ test-exploratory · kensaurus bundleExploratory ("monkey") QA of a live app as GUEST then LOGGED-IN, then diff. Headed playwright-cli, junk inputs, nav abuse. Use when "monkey test the app", "exploratory QA", "wander like a confused user", or "guest vs logged in". Story CRUD → test-qa. Hostile sweep → test-red-team. This-diff PDCA → test-playwright.
- ▌ workflow-onboard · kensaurusFirst-contact orientation for an unfamiliar codebase. Use when "I'm new to this repo", "orient me", "explain this codebase", "what does this do?", "onboard me", "first day on this project", or "catch me up on the codebase".
- ▌ audit-bundle-size · kensaurusAnalyse and shrink JavaScript bundle size for any web app. Use when asked to "reduce bundle size", "analyse bundle", "tree shaking", "lazy loading", "code splitting", "slow initial load", "large JS", "chunk size", "build performance", "LCP caused by JS", "why is the bundle so big", or "first load JS too large".
- ▌ audit-code-review · kensaurusReview this PR or diff for quality, security, and maintainability. Use when reviewing pull requests, examining a named change set, or the user asks for a code review of current work. Repo-wide anti-patterns → audit-code-quality. Bulk transform semantics → audit-codemod-safety.
- ▌ audit-performance · kensaurusAudit and optimize application runtime performance (Core Web Vitals, slow code, load time). Use when "slow page", "LCP/INP/CLS", or "optimize performance". JS payload → audit-bundle-size. Concurrent breaking point → test-load. Timeouts/retries → audit-resilience.
- ▌ audit-ux-journeys · kensaurus bundleCross-page UX audit for user stories, task completion, and information architecture — the layer audit-ux (per-page heuristics) skips. Use when "audit user flows", "IA audit", "can users find X", "navigation audit", or "funnel drop-off". Full DS burndown → plan-uiux-unification.
- ▌ enhance-web-forms · kensaurusBuild or upgrade web forms to production quality: accessible structure, schema-driven validation, client↔server parity. Use when "improve this form", "form validation", "accessible form", "multi-step form", "form error handling", or "the form UX is bad".
- ▌ enhance-web-web3d · kensaurus bundleAdd 3D and scroll-driven motion to an existing website or web app — Three.js / React Three Fiber for the scene, GSAP ScrollTrigger for scroll-driven choreography, and Motion /. Use when the user asks to "add 3D", "add a WebGL hero", "make it cinematic", "scroll-driven 3D", "three.js scene", "React Three Fiber", "GSAP.
- ▌ mushi-integration · kensaurusFull end-to-end Mushi Mushi integration smoke test: bug capture → AI triage → story mapping → TDD test generation → approval → execution → PDCA cycle. Use when "test mushi integration", "verify full pipeline", "mushi e2e check", "does mushi work end-to-end", "smoke test mushi", or after deploying changes.
- ▌ plan-stub-checker · kensaurus bundleExhaustive audit for stubs, dead buttons, fake components, unwired handlers, and dead links — then a wiring plan, no implementation. Use when "find dead buttons", "stub checker", "fake components", "unwired handlers", or "dead links". Live QA → test-qa.
- ▌ workflow-refactor · kensaurusGuide for refactoring code to improve quality without changing behavior. Use when refactoring, cleaning up code, reducing duplication, improving readability, or restructuring code. Integrates Firecrawl for researching modern patterns before refactoring, and codebase-aware dependency analysis to avoid breaking changes.
- ▌ workflow-spec-tdd · kensaurus bundleStop vibe-coding with a spec → plan → TDD loop before writing a line. Use for any non-trivial feature, refactor, or bug fix on web, React Native, or Capacitor. Use when asked to "build", "implement", "add a feature", "this keeps breaking", "do it properly", or when LLM output keeps being wrong.
- ▌ audit-code-quality · kensaurusDetect and fix repo-wide anti-patterns and consistency drift (naming, organisation, repeated smells). Use when "code smell", "anti-pattern", "technical debt", or "standardize the codebase". This PR/diff review → audit-code-review.
- ▌ audit-langfuse-llm · kensaurus bundleRun a PDCA quality audit on LLM/AI features: traces, prompts, costs, evals, grounding, hallucination. Use for "audit LLM quality", "check Langfuse", "audit prompts", "check AI quality", "audit AI costs", "check traces". Jailbreak/OWASP LLM → audit-llm-security. Token caps → plan-llm-cost-guardrails.
- ▌ audit-llm-security · kensaurusRead-only OWASP LLM Top 10 audit of app-facing AI features: prompt injection, data leak, supply chain, poisoning, unsafe output, excessive agency, system-prompt leak, RAG/embedding risks, misinformation, unbounded consumption. Use when "audit LLM security", "prompt injection", "jailbreak my chatbot", "is my AI safe".
- ▌ data-visualization · kensaurusBuild interactive, accessible charts, graphs, and data dashboards using Recharts, D3, or Victory. Use when the user says "chart", "graph", "data visualization", "analytics dashboard", "metrics display", "D3", "Recharts", "time-series", or "data display".
- ▌ meta-skill-creator · kensaurusCreate or update Cursor agent skills (SKILL.md). Use when authoring a new skill, updating an existing skill, or asking about SKILL.md structure and best practices.
- ▌ plan-aeo-readiness · kensaurusAudit a site for answer-engine / GEO citation readiness (ChatGPT, Perplexity, AI Overviews), then a phased plan. Use when "AEO", "GEO", "show up in ChatGPT/Perplexity", "AI search visibility", "llms.txt", or "am I blocking AI crawlers". Classic SEO meta/sitemap → enhance-web-seo.
- ▌ plan-secrets-audit · kensaurusAudit the working tree and git history for exposed credentials and mis-scoped keys, then a rotate-vs-relocate plan. Use when "hardcoded secrets", "did I commit a key", "secret scan", "is my .env safe", or "rotate keys". Do not fire for "RLS audit" or generic "security burndown".
- ▌ plan-test-coverage · kensaurus bundleUser-story-driven test coverage audit and plan — no test writing in this pass. Use when "test coverage plan", "coverage audit", "traceability matrix", "fake-green tests", "uncovered user stories", "plan tests for critical flows", or "whats not tested". Mutation score / assertion theater → test-mutation.
- ▌ workflow-housekeep · kensaurus bundleRepo housekeeping: sync READMEs to match current architecture, remove dead files (logs, screenshots, deprecated code, build artifacts), update npm/pip/cargo dependencies to latest. Use when asked to: "housekeep", "clean up repo", "update README", "update dependencies", "fix vulnerabilities", "remove dead code", "tidy.
- ▌ audit-accessibility · kensaurusAutomated WCAG 2.2 accessibility audit using playwright-cli to crawl every page, inject axe-core via eval, test keyboard navigation, check color contrast, ARIA labels, and heading order. Use when "audit accessibility", "check a11y", "WCAG audit", "check keyboard nav", or "test screen reader".
- ▌ complete-everything · kensaurusClose an approved plan with zero plan-related deferrals: implement every unfinished item, absorb every connected out-of-scope/follow-up/nice-to-have item parked by prior runs, fix. Use when a plan was marked done with work deferred, or the user says "complete everything", "don't defer", "fix out of scope too", "finish.
- ▌ design-mobile-first · kensaurusDesign mobile-first UIs: touch targets, safe areas, gestures, then enhance up. Use when building for small screens, touch, swipe, PWA, or tablet. Linearized desktop / responsive audit → audit-responsive.
- ▌ enhance-web-landing · kensaurus bundleBuild landing pages, portfolios, and marketing sites that don't look AI-generated. Use when asked for "landing page", "portfolio", "marketing site", "anti-slop", "Awwwards-style", "premium frontend", or when design needs a strong point of view.
- ▌ iterate-post-launch · kensaurusClose the post-launch improvement loop for any shipped app. Use when asked to "improve the app after launch", "fix the top issues", "post-launch polish", "what should I fix next", "production issues", "iterate on feedback", "post-release improvements", "what is broken in prod", "ship a polish pass", or "make it better.
- ▌ plan-data-integrity · kensaurusAudit a project for destructive-operation and migration safety gaps, then produce a phased safeguard plan. Use when "is my migration safe", "could I lose data", "my agent might delete prod", or "safe schema changes". Restore drills and RPO/RTO belong to plan-backup-dr. Source transforms → audit-codemod-safety.
- ▌ plan-error-handling · kensaurusAudit a codebase for silent failures, swallowed exceptions, and observability gaps across Sentry and Langfuse, then produce a phased fix plan. Use when the user says "errors aren't showing in Sentry", "things fail silently", "empty catch blocks", "add error handling", "check my Langfuse tracing", or is hardening.
- ▌ plan-security-audit · kensaurus bundleOWASP Top 10 + Supabase-first hardening burndown. Use when "security audit plan", "OWASP audit", "hardening plan", or "security burndown". App-layer auth flows → audit-auth-flows. Table RLS → plan-rls-audit. Key rotation → plan-secrets-audit. App LLM attacks → audit-llm-security.
- ▌ workflow-git-commit · kensaurusGenerate clear, descriptive commit messages following conventional commits format. Use when committing code, writing commit messages, or when the user asks for help with git commits.
- ▌ workflow-green-repo · kensaurusDrive an entire repository to a fully green baseline — typecheck, lint, tests, and build all passing from a clean checkout — when the user has explicitly authorized fixing. Use when "make the repo green", "get CI passing", "fix all the failing tests". Ratchet integrity → audit-gate-logic.
- ▌ audit-codemod-safety · kensaurusRead-only audit of a codemod or bulk mechanical transform for behavior-preservation — compiles/lints is not same-behavior. Use when "did this codemod break anything", "audit this bulk refactor", or before merging a mass find-replace. Diff quality → audit-code-review. SQL → plan-data-integrity.