asymmetric-al/react-doctor
.cursor/skills/react-doctor/SKILL.md
Installs and runs Million's React Doctor to audit a Next.js/React codebase for performance, security, correctness, and architecture issues. Use when the user mentions react-doctor, React Doctor, millionco/react-doctor, performance audits, code health, bundle size, or suspicious React patterns.
$ install --global
skillsauthnpx skillsauth add asymmetric-al/core react-doctorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 3, 2026, 9:32 AM5.5s1 file scanned
SKILL.md
- name:
- react-doctor
- description:
- Installs and runs Million's React Doctor to audit a Next.js/React codebase for performance, security, correctness, and architecture issues. Use when the user mentions react-doctor, React Doctor, millionco/react-doctor, performance audits, code health, bundle size, or suspicious React patterns.
React Doctor (Million)
Run an automated audit of a React/Next.js codebase and turn the diagnostics into a prioritized fix list.
Quick Start
Install/refresh the skill (optional):
npx skills add millionco/react-doctor
Run React Doctor in the repo root:
npx -y react-doctor@latest . --verbose
Workflow
- Confirm you are at the project root (the directory that contains
package.json). - If the skill is missing/outdated, run:
npx skills add millionco/react-doctor
- Run the audit:
npx -y react-doctor@latest . --verbose
- Convert the output into an actionable plan:
- Capture the overall score (0-100).
- List the top issues by severity (errors first).
- For each issue: include the file path, what to change, and why it matters.
- Fix issues starting with highest severity and highest leverage (security/correctness before perf polish).
- Re-run the audit and confirm the score improves:
npx -y react-doctor@latest . --verbose
Next.js App Router Notes
When triaging results for Next.js App Router projects, prioritize:
- Async Client Components (often accidental
"use client"leaks) - Client-side fetching for server-owned data (prefer Server Components / Route Handlers)
- Missing/incorrect
metadataexports - Server Actions without auth checks
- Excessive client bundle growth (barrel imports, large deps)
Expected Output (Assistant)
When reporting results back, format as:
React Doctor score: <number>/100
Top findings:
- <severity> <short title> — <path(s)>
- ...
Fix plan:
1. <most important fix> (why)
2. ...
Verification:
- npx -y react-doctor@latest . --verbose
Checklist
- [ ] (Optional)
npx skills add millionco/react-doctor - [ ]
npx -y react-doctor@latest . --verbose - [ ] Findings summarized with file paths
- [ ] Fixes applied in severity order
- [ ] Audit re-run and score verified improved
Related Skills
asymmetric-al/payload
development
VerifiedTrustedCommunity
Use when working with Payload CMS projects (payload.config.ts, collections, fields, hooks, access control, Payload API). Use when debugging validation errors, security issues, relationship queries, transactions, or hook behavior.
473SKILL.mdUpdated Apr 10, 2026
asymmetric-al/triage-ci-flake
testing
VerifiedTrustedCommunity
Use when CI tests fail on main branch after PR merge, or when investigating flaky test failures in CI environments
473SKILL.mdUpdated Apr 10, 2026
asymmetric-al/generate-translations
tools
VerifiedTrustedCommunity
Use when new translation keys are added to packages to generate new translations strings
473SKILL.mdUpdated Apr 10, 2026
asymmetric-al/repo-entry
data-ai
VerifiedTrustedCommunity
Pointer to the canonical agent instruction and skill system for this monorepo
473SKILL.mdUpdated Apr 10, 2026