cursor/review-plugin-submission
create-plugin/skills/review-plugin-submission/SKILL.md
Audit a Cursor plugin for marketplace readiness. Use when validating manifests, component metadata, discovery paths, and submission quality before publishing.
$ install --global
skillsauthnpx skillsauth add cursor/plugins review-plugin-submissionInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 8:05 AM4.5s1 file scanned
SKILL.md
- name:
- review-plugin-submission
- description:
- Audit a Cursor plugin for marketplace readiness. Use when validating manifests, component metadata, discovery paths, and submission quality before publishing.
Review plugin submission
Trigger
A plugin is implemented and needs a final quality check before submission or release.
Workflow
- Verify manifest validity:
.cursor-plugin/plugin.jsonexistsnameis valid lowercase kebab-case- metadata fields are coherent (
description,version,author,license)
- Verify component discoverability:
- Skills in
skills/*/SKILL.md - Rules in
rules/as.mdcor markdown variants - Agents in
agents/markdown files - Commands in
commands/markdown or text files - Hooks in
hooks/hooks.json - MCP config in
mcp.json(ormcpServersoverride)
- Skills in
- Verify component metadata:
- Skills include
nameanddescriptionfrontmatter - Rules include valid frontmatter and clear guidance
- Agents and commands include
nameanddescription
- Skills include
- Verify repository integration:
- For marketplace repos, plugin entry exists in
.cursor-plugin/marketplace.json sourceresolves to plugin directory and names are unique
- For marketplace repos, plugin entry exists in
- Verify documentation quality:
README.mdstates purpose, installation, and component coverage- optional logo path is valid and repository-hosted
Checklist
- Manifest exists and parses as valid JSON
- All declared paths exist and are relative
- No broken file references
- No missing frontmatter on skills/rules/agents/commands
- Plugin scope is clear and focused
- Marketplace registration complete (if multi-plugin repo)
Output
- Pass/fail report by section
- Prioritized fix list
- Final submission recommendation
Related Skills
cursor/setup-pstack
documentation
VerifiedTrustedCommunity
Configure which models pstack uses per role. Detects your available models and writes an always-applied rule that overrides the skill defaults. Use for /setup-pstack, "configure pstack models", or changing pstack's model choices.
1,884SKILL.mdUpdated Jun 7, 2026
cursor/principle-sequence-verifiable-units
testing
VerifiedTrustedCommunity
Apply to multi-step work (sweeps, migrations, runs of similar edits) and to how you stack commits and PRs. Break work into small units that each end in a verifiable state, check each before the next, and order delivery so the sequence proves itself to a reviewer.
1,884SKILL.mdUpdated Jun 7, 2026
cursor/figure-it-out
development
VerifiedTrustedCommunity
Design an auditable playbook when no narrower one fits: a large migration, an ambitious multi-part change, or work a human reviews after stepping away. Scales rigor to the task, runs a hypothesis loop, and logs decisions via show-me-your-work. Use for /figure-it-out, 'figure it out', a large migration, or when no narrower playbook applies.
1,884SKILL.mdUpdated May 25, 2026
cursor/why
tools
VerifiedTrustedCommunity
Use for 'why does X work this way', 'why we picked Y', design rationale, regressions, postmortems, or data-backed thresholds. Discovers available MCPs and queries each evidence category (source control, issue tracker, long-form docs, real-time chat, infrastructure observability, error tracking, product analytics warehouse) in parallel, then returns a cited read on decisions and tradeoffs. Use how for runtime behavior.
1,884SKILL.mdUpdated May 24, 2026