cursor/thermos
thermos/skills/thermos/SKILL.md
Launch both thermo-nuclear review subagents in parallel, then synthesize their findings. Use for thermos, double thermo review, or combined bug/security and code-quality branch audits.
$ install --global
skillsauthnpx skillsauth add cursor/plugins thermosInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 29, 2026, 2:35 AM19.3s1 file scanned
SKILL.md
- name:
- thermos
- description:
- Launch both thermo-nuclear review subagents in parallel, then synthesize their findings. Use for thermos, double thermo review, or combined bug/security and code-quality branch audits.
- disable-model-invocation:
- true
Thermos
Run the two thermo review passes as async background subagents in parallel, then synthesize their results.
Workflow
- Determine the review scope from the user request, PR, current branch, or relevant changed files.
- Gather the diff and any file/context excerpts needed for reviewers to evaluate the change without guessing.
- Launch both subagents in the same message with
run_in_background: true:subagent_type: "thermo-nuclear-review-subagent"for bugs, breakages, security, devex regressions, feature-flag leaks, and other branch-audit risks.subagent_type: "thermo-nuclear-code-quality-review-subagent"for maintainability, structure, file-size growth, spaghetti, abstractions, and codebase-health risks.
- Pass each subagent the same scoped diff/file context and ask it to return prioritized findings with file references and evidence.
- After both finish, synthesize the results with findings first, deduplicated across reviewers. Weight overlapping findings more heavily, resolve disagreements with your own judgment, and keep summaries brief.
If individual background summaries are already visible to the user, do not restate them wholesale. Surface the unified verdict, the highest-signal findings, and any remaining uncertainty.
Related Skills
cursor/principle-encode-lessons-in-structure
development
VerifiedTrustedCommunity
Apply when you catch yourself writing the same instruction a second time, or notice a recurring correction. Encode the rule as a lint, metadata flag, runtime check, or script instead of more text.
1,824SKILL.mdUpdated May 24, 2026
cursor/principle-build-the-lever
tools
VerifiedTrustedCommunity
Apply to any non-trivial work, not just bulk work: edits, migrations, analyses, checks. Build the tool that does it or proves it (codemod, script, generator, or a skill your subagents follow) instead of working by hand. The tool is the artifact a reviewer can rerun.
1,309SKILL.mdUpdated May 27, 2026
cursor/why
tools
VerifiedTrustedCommunity
Use for 'why does X work this way', 'why we picked Y', design rationale, regressions, postmortems, or data-backed thresholds. Discovers available MCPs and queries each evidence category (source control, issue tracker, long-form docs, real-time chat, infrastructure observability, error tracking, product analytics warehouse) in parallel, then returns a cited read on decisions and tradeoffs. Use how for runtime behavior.
1,309SKILL.mdUpdated May 24, 2026
cursor/unslop
data-ai
VerifiedTrustedCommunity
Cut AI tells from any writing. Must always apply.
1,309SKILL.mdUpdated May 24, 2026