Kenji 技能
执行面向 React、Next.js、Supabase 和 Agent 工具的工程流程。
Kenji 完整目录包含 161 个通用技能和十二个不同的 Cursor 专用技能，覆盖审查、开发、测试、交付、文档与 IDE 工具，并另配命令、Agent 和 MCP 模板。
适用场景
- 开发并验证应用修改
- 审查质量、安全和架构
- 配置 Cursor 工具与 Agent 流程
使用方法
说明任务和项目背景。需要命令与集成时使用上游安装器；Cursor 专用技能需要对应 Cursor 能力。
Skills
audit-accessibility
WCAG 2.2 AA audit via playwright-cli: axe-core, keyboard, contrast, target size, focus, ARIA. Use when "audit accessibility", "check a11y", "WCAG audit", "check keyboard nav", or "test screen reader".
kensaurus/skillsaudit-agent-speed
Measure and fix a slow coding-agent setup: status line, hooks, instruction bloat, effort, worktree pile-up, antivirus and indexer scans. Use when "Claude is slow" or "CPU is pinned". App speed → audit-performance.
kensaurus/skillsaudit-analytics
Read-only audit of product-analytics events (PostHog, Amplitude, Mixpanel, GA4): taxonomy, funnels, consent-gated firing, dead or duplicate events. Use when "audit our analytics", "are we tracking the right events", or "funnel instrumentation".
kensaurus/skillsaudit-auth-flows
Read-only audit of app-layer auth: route×gate matrix, session lifecycle, OAuth, provider traps (getSession vs getUser, middleware-only gates, CVE-2025-29927). Use when "audit our auth" or "check middleware protection". RLS → plan-rls-audit.
kensaurus/skillsaudit-backend-architecture
Read-only backend-architecture audit and pattern advisor, gated by stack. Use when "audit backend architecture", "which pattern should I use", "am I over-engineering", or "sync vs event-driven". Enforced boundaries → enhance-arch-boundaries.
kensaurus/skillsaudit-bundle-size
Analyse and shrink a web app's JavaScript bundle. Use when "reduce bundle size", "code splitting", "slow initial load", or "why is the bundle so big". Runtime → audit-performance.
kensaurus/skillsaudit-cicd
Audit GitHub Actions CI/CD for cost, speed, and safety. Use when the Actions bill or minutes are high, runners cost too much, CI is slow, cache storage grows, or "CI/CD / workflow audit". Bypass or ratchet gaming → audit-gate-logic.
kensaurus/skillsaudit-code-quality
Detect and fix repo-wide anti-patterns and consistency drift (naming, organisation, repeated smells). Use when "code smell", "anti-pattern", "technical debt", or "standardize the codebase". This PR/diff review → audit-code-review.
kensaurus/skillsaudit-code-review
Review a PR or diff for correctness, security, and maintainability. Use for a pull request, a named change set, or "review my changes". Repo-wide anti-patterns → audit-code-quality. Bulk transforms → audit-codemod-safety.
kensaurus/skillsaudit-codemod-safety
Read-only check that a codemod or bulk transform preserved behavior — compiling is not proof. Use when "did this codemod break anything", "audit this bulk refactor", or before merging a mass find-replace. SQL → plan-data-integrity.
kensaurus/skillsaudit-db-schema
Audit a database schema for consistency, constraints, naming, indexes, and migrations. Use when reviewing schema design. Destructive-op gates → plan-data-integrity. RLS → plan-rls-audit. Restore/RPO → plan-backup-dr.
kensaurus/skillsaudit-doctrine
Read-only audit of custom lint and ratchet rules: is each rule right on the merits, not just enforced. Use when "is this lint rule wrong", "the ratchet banned a legitimate pattern", or "audit our guardrail doctrine". Enforcement → audit-gate-logic.
kensaurus/skillsaudit-env-parity
Read-only audit of config parity across dev, staging, and prod: missing or misnamed vars, drifted flags, hardcoded values, reused secrets. Use when "works locally but not in prod", "audit our environments", or "config drift".
kensaurus/skillsaudit-fe-api
Audit frontend API calls against backend implementation for contract alignment and network shape. Use when "API audit", "FE-BE contract", or "review frontend API integration". Live 4xx/5xx reproduction → debug-fe-be-integration.
kensaurus/skillsaudit-gate-logic
Read-only audit of CI gate logic: silent bypass, ratchet gaming, required-but-not, duplicate gates. Use when "can CI be bypassed" or "why did a regression pass CI". Cost → audit-cicd. Rule content → audit-doctrine.
kensaurus/skillsaudit-i18n
Audit and fix internationalisation in web or mobile apps. Use when "audit i18n", "fix translations", "add locale", "hardcoded strings", "localisation", "translation quality", or "the Japanese feels like Google Translate".
kensaurus/skillsaudit-infra-cost
Read-only audit of hosting, database, storage, egress, and serverless spend (Supabase, Vercel, S3/R2, edge). Use when "hosting bill is high", "cut infra costs", or a bill jumps. CI minutes → audit-cicd. LLM tokens → plan-llm-cost-guardrails.
kensaurus/skillsaudit-langfuse-llm
PDCA quality audit of LLM features: traces, prompts, costs, evals, grounding, hallucination. Use for "audit LLM quality", "check Langfuse", or "audit AI costs". Jailbreaks → audit-llm-security. Cost caps → plan-llm-cost-guardrails.
kensaurus/skillsaudit-llm-security
Read-only OWASP LLM Top 10 audit of app-facing AI: prompt injection, data leakage, unsafe output or agency, RAG risks, unbounded spend. Use when "audit LLM security", "prompt injection", "jailbreak my chatbot", or "is my AI safe?".
kensaurus/skillsaudit-monetization-iap
Read-only audit of mobile IAP and subscriptions (StoreKit 2, Play Billing, RevenueCat): receipt validation, restore, lifecycle sync, grace periods, entitlements. Use when "audit our IAP" or "restore purchases broken". Web → audit-payment-system.
kensaurus/skillsaudit-payment-system
Read-only audit of payment and money-movement code, scoped from Stripe Checkout to in-house ledgers. Use when "audit payment system", "double charge / idempotency", "ledger / reconciliation", or "webhook / 3DS / PCI". IAP → audit-monetization-iap.
kensaurus/skillsaudit-performance
Audit and fix runtime performance (Core Web Vitals, load priority). Use when "slow page", "LCP/INP/CLS", "fetchpriority", "long tasks", or "bfcache". JS payload → audit-bundle-size. Instant nav → enhance-web-instant-nav. Load limits → test-load.
kensaurus/skillsaudit-realworld
Read-only conformance audit of a full-stack app against RealWorld ("Conduit"): API spec, shared E2E suite, closest-stack reference. Use when "audit against RealWorld", "Conduit conformance", or "is my full-stack app complete?".
kensaurus/skillsaudit-registry-listing
Read-only audit of where a repo is found: README first screen, npm/PyPI metadata and tarball, GitHub topics, social preview, plugin manifests. Use when "audit our npm listing", "README as landing page", or "why nobody finds the package". Fix → enhance-readme.
kensaurus/skillsaudit-resilience
Read-only production-resilience audit: timeouts, bounded retries, circuit breakers, idempotency, rate limits, graceful degradation, PII in logs. Use when "resilience audit" or "will this survive real traffic?".
kensaurus/skillsaudit-responsive
Audit and fix layouts at every breakpoint; desktop is not a wide phone. Use when "responsive audit", desktop looks stretched, there is no max-width, or 1440 looks like a phone. Touch-first build → design-mobile-first.
kensaurus/skillsaudit-security
Audit and fix app code against OWASP (injection, headers, dependencies). Use when "review security" or "check vulnerabilities". Auth gates → audit-auth-flows. Plan-only → plan-security-audit. RLS → plan-rls-audit. LLM → audit-llm-security.
kensaurus/skillsaudit-skill-conflicts
Read-only audit of a skill pack for contradictory directives, overlapping triggers, stale cross-refs, and context bloat. Use when "audit my skills", "conflicting skills", "wrong skill triggered", or after adding a batch. Authoring → meta-skill-creator.
kensaurus/skillsaudit-ui-states
Read-only audit of unhappy-path UI states — empty, loading, error, offline, zero-results, permission, overflow — then a fix plan. Use when "check empty/error states", "audit loading states", or "what happens when this fails".
kensaurus/skillsaudit-uiux-design-system
Audit visual-system coherence: tokens, component variants, color, type, spacing, dark mode. Use for "design drift", inconsistent UI, or duplicate primitives. Per-page usability → audit-ux. Plan-only unification → plan-uiux-unification.
kensaurus/skillsaudit-ux-journeys
Cross-page UX audit of user stories, task completion, and IA. Use when "audit user flows", "IA audit", "can users find X", "navigation audit", or "funnel drop-off". Per-page heuristics → audit-ux.
kensaurus/skillsaudit-ux
Per-page UX audit with NN/g heuristics, microcopy review, and Google HEART. Use when evaluating usability, auditing microcopy, or assessing cognitive load. Cross-page flows/IA → audit-ux-journeys.
kensaurus/skillsbackend-db-performance
Optimize slow queries, indexes, and N+1s. Use when "slow query", "database performance", "add an index", or "N+1". Schema consistency → audit-db-schema. RLS access control → plan-rls-audit.
kensaurus/skillsbackend-error-handling
Implement error-handling patterns: boundaries, toasts, one API error shape. Use when "error boundary", "error toast", or "standardize API errors". Plan-only audit → plan-error-handling. Sentry triage → debug-sentry-monitor.
kensaurus/skillsbackend-observability
Implement correlated errors, traces, and structured logs with PII redaction. Use when "add logging", "instrument this", or wiring Sentry/Langfuse. Plan-only audit → plan-error-handling. Sentry triage → debug-sentry-monitor.
kensaurus/skillsbackend-patterns
Apply backend patterns — queues, caching, rate limits, serverless/edge. Use when "queue jobs", "caching layer", "rate limiting", "server actions", or "edge function". Which architecture to pick → audit-backend-architecture.
kensaurus/skillsbackend-realtime
Implement real-time features with WebSockets, Supabase Realtime, or Server-Sent Events. Use when "real-time", "live updates", "WebSocket", "notifications", "chat", "presence", "collaborative", "live data", or "instant sync".
kensaurus/skillsburndown-full
Drive a planned mechanical change to 100% repo coverage after a run stopped early. Use when "finish the burndown", "it stopped halfway", "apply this everywhere", or "half-migrated". One plan plus deferrals → complete-everything.
kensaurus/skillscomplete-everything
Closure mode for one approved plan: finish every open item and connected deferral, verify each acceptance criterion, require completion-judge PASS. Use when "complete everything", "don't defer", "fix out of scope too", or a plan was falsely marked done.
kensaurus/skillsdata-pipeline
Wire ETL, ingestion, cron, and queue jobs with idempotency, atomic writes, data contracts, and dead-letters. Use for "build a pipeline", "sync X into Y", "cron double-counts", "dedupe", "backfill", or "the numbers are wrong after a retry".
kensaurus/skillsdata-visualization
Build interactive, accessible charts and dashboards with Recharts, D3, or Victory. Use when "chart", "graph", "data visualization", "analytics dashboard", "metrics display", "time-series", "D3", or "Recharts".
kensaurus/skillsdebug-error
Diagnose one bug with hypotheses and runtime evidence before fixing. Use when "debug this error" or behavior is unexpected. FE↔BE mismatch → debug-fe-be-integration. Bug to PR → workflow-fix-and-ship. Sentry backlog → debug-sentry-monitor.
kensaurus/skillsdebug-fe-be-integration
Diagnose and fix frontend↔backend contract failures by tracing requests, server logs, validation, auth, and responses on both sides. Use for API 4xx/5xx, mismatched payloads, or "frontend and backend disagree". One layer → debug-error.
kensaurus/skillsdebug-sentry-monitor
Operate Sentry: triage and fix unresolved issues, cut noise, audit instrumentation, monitor after deploy. Use when "check Sentry" or "review production errors". One bug → workflow-fix-and-ship. Plan-only audit → plan-error-handling.
kensaurus/skillsdeploy-npm
Release an npm package: version, CHANGELOG, publish, verify. Use when "publish this package", "release to npm", or "ship a new npm version". Running-app production deploy → workflow-ship-and-observe.
kensaurus/skillsdeploy-verify
Post-deploy smoke test across browser, Sentry, Supabase, Langfuse, and the public web. Use when "verify deploy", "smoke test production", "post-release check", or "ship or rollback". Deploy plus watch → workflow-ship-and-observe.
kensaurus/skillsdesign-api
Design REST and GraphQL APIs: naming, versioning, error shapes, auth. Use when "design an API", "create endpoints", "structure my API responses", "plan API architecture", "REST vs GraphQL", or "API contract".
kensaurus/skillsdesign-canvas
Create museum-quality visual art as .png or .pdf: posters, infographics, certificates, badges, banners, social graphics, print. Use when "create artwork", "design graphic", "visual identity", or "print material".
kensaurus/skillsdesign-email
Design and build transactional and marketing email templates. Use when "build an email template", "welcome email", "password reset email", "React Email", "MJML", "dark mode email", or "email copy review". Spam/SPF → enhance-email-deliverability.
kensaurus/skillsdesign-frontend
Create a new production-grade UI from scratch, not a polish pass. Use when "build this UI", "design this page", or "new dashboard layout". Polish → enhance-web-ui. Landing → enhance-web-landing. Redesign → enhance-web-redesign.
kensaurus/skillsdesign-generative-art
Create algorithmic visuals with p5.js, Canvas, or SVG using seeded randomness and interactive controls. Use when "generative art", "procedural visuals", "flow fields", "particle system", or "art from code". Charts → data-visualization.
kensaurus/skillsdesign-mobile-first
Design a new touch-first UI: targets, safe areas, gestures, then enhance up. Use when building for phones, touch, swipe, PWA, or tablet. Responsive audit → audit-responsive.
kensaurus/skillsdesign-motion
Build one new animation (micro-interaction, page transition, scroll, hover) with Motion, CSS, or GSAP. Use when adding one animation to a new surface. A pass across an existing app → enhance-motion.
kensaurus/skillsdesign-prd
Generate Product Requirements Documents through structured conversation for any project. Use when starting a new feature, documenting requirements, creating specs before implementation, or needing clarity on scope and success criteria.
kensaurus/skillsdesign-system
Build a new design system (tokens, variants, theming). Use when "create a design system" or "component library from scratch". Drifted existing system → housekeep-design. Plan-only unification → plan-uiux-unification.
kensaurus/skillsdesign-theme
Apply one of 11 preset themes (colors, fonts) to slides, docs, or landing pages. Use when "apply theme", "color palette", "brand colors", "styling slides", "presentation design", "visual identity", or styling artifacts consistently.
kensaurus/skillsdocs-adr
Create and maintain lightweight Architecture Decision Records as agent-readable decision memory: what was decided, why, and what was rejected. Use when "record this decision", "set up ADRs", or "the agent keeps suggesting Y again".
kensaurus/skillsdocs-coauthor
Co-author structured documents (specs, PRDs, RFCs, proposals) in three stages: gather context, draft, reader-test. Use when writing a proposal, technical spec, or similar long-form document. Decision records → docs-adr.
kensaurus/skillsdocs-comparison-pages
Write honest "X vs Y", "alternatives to X", and "migrate from X" pages from verified facts, each unique and dated for review. Use when "comparison page", "vs page", "alternatives to", "competitor page", or "migration guide from".
kensaurus/skillsdocs-domain-modeling
Build a project's domain model: a CONTEXT.md glossary and ubiquitous language. Use when pinning down terminology, or the agent "uses the wrong words". Decision records (INDEX.md, rejected alternatives) → docs-adr.
kensaurus/skillsdocs-launch-kit
Versioned launch kit from the repo's real features: Show HN, Product Hunt, Reddit/X/LinkedIn posts, release notes, a calendar with UTM links. Use when "launch post", "Show HN", "Product Hunt listing", "announce this release", or "launch copy".
kensaurus/skillsdocs-writer
Write developer docs: README content, API references, code comments, changelog entries. Use when "write docs", "document this API", or "explain for contributors". README visuals → enhance-readme. Co-authored specs → docs-coauthor.
kensaurus/skillsenhance-agent-guardrails
Install guardrails as code so AI sessions cannot reintroduce leaked secrets, injection, or untested code. Use when "set up guardrails", "stop vibe-coding regressions", or "add pre-commit security checks". Gate audit → audit-gate-logic.
kensaurus/skillsenhance-arch-boundaries
Enforce architecture boundaries in CI with dependency-cruiser or eslint-boundaries: layer direction, feature isolation, forbidden imports. Use when "enforce module boundaries" or "stop spaghetti imports". Advice only → audit-backend-architecture.
kensaurus/skillsenhance-capacitor-ui
Separate desktop and mobile UI in hybrid apps shipped as PWA + iOS + Android (Capacitor, Tauri, Expo Web, Ionic). Use when a UI sweep "improved one surface and broke the other".
kensaurus/skillsenhance-email-deliverability
Audit and fix email deliverability: SPF, DKIM, DMARC, reputation, bounces and complaints, list hygiene, unsubscribe compliance. Use when "emails go to spam", "set up SPF/DKIM", or "check deliverability". Templates → design-email.
kensaurus/skillsenhance-growth-loops
Add growth loops to a live product: a "powered by" badge, shareable artifacts, invites and referral credit, each with K-factor events. Use when "referral program", "viral loop", "powered by badge", or "get users to invite".
kensaurus/skillsenhance-lifecycle-email
Lifecycle email from product events: activation nudges, trial expiry by activated vs stalled, limit-reached upgrades, win-back, with exits and consent. Use when "onboarding emails", "drip sequence", or "win-back email". Templates → design-email.
kensaurus/skillsenhance-mobile-native-feel
Make an existing Expo/RN or Capacitor app feel native: system tabs, sheets, edge-to-edge, back, haptics, springs, lists. Use when "feels like a website", "not native", "add haptics", "immersive full screen", or "declutter the home screen".
kensaurus/skillsenhance-motion
Audit an existing web app's motion, then apply one coherent, reduced-motion-safe pass. Use when "motion pass", "animate the app", or "add micro-interactions". One new animation → design-motion.
kensaurus/skillsenhance-onboarding
Activation pass: define the activation event, cut steps to first value, add templates, sample data, a short checklist, and signup → activated events. Use when "improve onboarding", "users sign up and leave", or "activation rate".
kensaurus/skillsenhance-pwa
Add or upgrade PWA features: manifest, service worker, offline mode, install prompt, push, background sync. Use when "make it a PWA", "offline support", or "install prompt". Native → mobile-capacitor-platform.
kensaurus/skillsenhance-readability
Audit and fix how easily content is understood: line length (CPL), reading level, grouping, deadspace, icons or tables that cut verbosity. Use when "hard to read", "too dense", "reading level", "cognitive load", or "turn this prose into a table".
kensaurus/skillsenhance-readme
Enhance an existing README: theme-aware hero, feature tour, screenshots or GIF, accurate badges, synced content. Use when "enhance README", "make README prettier", "add screenshots", or "showcase the app". Prose only → docs-writer.
kensaurus/skillsenhance-skill-prompts
Upgrade how an existing SKILL.md instructs, not what it does: freedom, a classification contract, one worked example, an evidence rubric, effort. Use when "enhance this skill's prompts", "upgrade skill authoring", or "apply the prompt playbook".
kensaurus/skillsenhance-ux-laws
Measured fix pass on one screen or flow against seven Laws of UX: Fitts, Hick, Miller, Jakob, Zeigarnik, Goal-Gradient, Von Restorff. Use when "too many choices", "hard to tap", or "users drop off mid-flow". NN/g pass → enhance-web-ux.
kensaurus/skillsenhance-web-conversion
Conversion pass for landing, pricing, and upgrade paths: positioned hero, one CTA, real proof, anchored tiers, upgrade prompts at value moments. Use when "pricing page", "improve conversion", or "paywall UX". Page build → enhance-web-landing.
kensaurus/skillsenhance-web-forms
Build or upgrade web forms: accessible structure, schema-driven validation, client↔server parity. Use when "improve this form", "form validation", "accessible form", "multi-step form", "form error handling", or "the form UX is bad".
kensaurus/skillsenhance-web-instant-nav
Instant in-site navigation: Speculation Rules, View Transitions, bfcache, 103 Early Hints. Use when "instant navigation", "prerender", "early hints", "back button reloads", or "second page is slow". First-load CWV → audit-performance.
kensaurus/skillsenhance-web-landing
Build landing pages, portfolios, and marketing sites that don't look AI-generated. Use for "landing page", "portfolio", "marketing site", "anti-slop", "Awwwards-style", "premium frontend", or a design that needs a point of view.
kensaurus/skillsenhance-web-redesign
Upgrade an existing site/app to premium quality. Use when "redesign this app" or "upgrade UI to premium". One-page polish → enhance-web-ui. Plan-only slop audit → plan-antislop. New UI from scratch → design-frontend.
kensaurus/skillsenhance-web-seo
Audit and fix SEO for a web app. Use when "improve SEO", "SEO audit", "add meta tags", "add structured data", "sitemap", "canonical URLs", "Open Graph", "Google indexing", "rich results", or "why is my site not ranking".
kensaurus/skillsenhance-web-ui
Polish an existing page's hierarchy, spacing, type, and visual personality. Use when "make this page polished/premium", "less crowded", or "better visual hierarchy". Readability → enhance-readability. Flow/IA → enhance-web-ux.
kensaurus/skillsenhance-web-ux
NN/g-grounded fix of one existing page's flows. Use when "fix UX of /xxx" or "improve information density". Repo-wide slop plan → plan-antislop. Composition/type → enhance-web-ui. Reading level → enhance-readability. Heuristics only → audit-ux.
kensaurus/skillsenhance-web-web3d
Add purposeful 3D/WebGL and scroll choreography to an existing site with Three.js/R3F, GSAP, or Motion. Use when "add 3D", "WebGL hero", "React Three Fiber", or "scroll-driven 3D". Motion without 3D → enhance-motion.
kensaurus/skillshandoff
Compact the current conversation into a handoff document a fresh agent can pick up. User-invoked via /handoff; an optional argument describes what the next session will focus on.
kensaurus/skillshousekeep-backlog
Inventory parked work — unfinished plans, deferred phases, TODO/FIXME, skipped tests, open findings — into a living BACKLOG.md that diffs new/done/stale. Use when "what's left behind", "inventory TODOs", or "consolidate the backlog".
kensaurus/skillshousekeep-dead-code
Remove dead code by category — one commit each, typecheck and tests between, bisect on red — then add a Knip ratchet. Use when "delete the dead code" or "wire up Knip". Audit first → plan-dead-code. README/deps → workflow-housekeep.
kensaurus/skillshousekeep-design
Consolidate a drifted design system into one token and component source of truth. Use after an approved plan-uiux-unification, or when "clean up the design system now", "migrate to one button", or "resolve token conflicts".
kensaurus/skillshousekeep-files
Copy-not-move organizer for document trees: hash inventory, dry run, labeled copies, search catalog, verify every source survived. Use when "organize my Downloads", "sort my company folders", or "file my receipts". Repo cleanup → workflow-housekeep.
kensaurus/skillshousekeep-gates
Consolidate accreted CI gates, ratchets, and hooks into one required aggregator check. Use after audit-gate-logic, or when "clean up our CI checks", "we have three lint jobs", or "make one quality gate". Pipeline cost → audit-cicd.
kensaurus/skillsiterate-agent-harness
Turn an agent failure (premature stop, false completion, gamed check, missed file) into a rule, hook, or CI guard with a regression test. Use when "the agent stopped early again", "it gamed the test", or "add a guard so this doesn't recur".
kensaurus/skillsiterate-gtm-weekly
Weekly go-to-market review for a shipped product: funnel by source, activation cohort, top drop-off, launch results, then one experiment and one post, scorecard row appended. Use when "weekly growth review", "what should we do this week for growth", "GTM check-in". Production bugs → iterate-post-launch.
kensaurus/skillsiterate-post-launch
Close the feedback loop on a live app: read production signals, rank the top issues, fix, verify live, repeat. Use when "post-launch polish", "fix the top production issues", "iterate on feedback", or "what should I fix next after launch?".
kensaurus/skillsmeta-mcp-builder
Build Model Context Protocol (MCP) servers that expose services, APIs, and data as typed tools for agents. Use when "build an MCP server", "give Claude access to X", "create an MCP tool", "expose my API to an agent", or "AI agent integration".
kensaurus/skillsmeta-skill-creator
Create or update a pack SKILL.md (frontmatter, house limits, T1–T8). Use when authoring a kenji skill. Prompt-only upgrade → enhance-skill-prompts. Cursor skill wizard → create-skill.
kensaurus/skillsmobile-capacitor-platform
Capacitor native layer: system bars, keyboard, back, plugins, push, deep links, OTA, native CI. Use for "keyboard covers the input", "status bar overlaps", "add push", or "OTA update".
kensaurus/skillsmobile-emulator-start
Boot the Android emulator and Metro (Expo or bare RN) in order: check terminals, kill stale ports, pick an AVD. Use when "start Metro", "start emulator", "Cannot connect to Expo", or a stuck dev loop. QA → mobile-emulator-test.
kensaurus/skillsmobile-emulator-test
QA a native Android or Expo dev-client build on the emulator: UI, Supabase, Sentry per CRUD step. Use for "test on emulator", "QA Android build", "white screen", or "adb reverse".
kensaurus/skillsmobile-rn-performance
Fix React Native / Expo performance, build, and upgrade issues: jank, slow startup, large bundles, memory leaks, Hermes, FlashList, Reanimated, Turbo Modules, 16KB alignment, SDK upgrades.
kensaurus/skillsmobile-rn-screen
Polish one existing React Native screen so it feels native. Use for "this screen looks off", "clunky on iOS", "Android looks wrong", "jank when scrolling", or "button is unreachable".
kensaurus/skillsmushi-health
Pass/fail health check across every Mushi Mushi pipeline component — CLI credentials, API reachability, edge functions, BYOK key pool, QA cron. Use when "is mushi working", "mushi health check", "check mushi pipeline", "mushi deploy check", "pipeline not responding", or right after setup.
kensaurus/skillsmushi-integration
Full end-to-end Mushi Mushi integration smoke test: bug capture → AI triage → story mapping → TDD test generation → approval → execution → PDCA cycle. Use when "test mushi integration", "verify full pipeline", "mushi e2e check", "does mushi work end-to-end", "smoke test mushi", or after deploying changes.
kensaurus/skillsplan-aeo-readiness
Plan-only audit of answer-engine (AEO/GEO) citation readiness for ChatGPT, Perplexity, and AI Overviews. Use when "AEO", "GEO", "show up in ChatGPT/Perplexity", "AI search visibility", "llms.txt", or "am I blocking AI crawlers".
kensaurus/skillsplan-antislop
Plan-only authenticity / AI-slop audit across prose, UI, code, and IA. Use when "looks like AI slop", "reads like ChatGPT", or "authenticity burndown". One-page UX apply → enhance-web-ux. Visual polish → enhance-web-ui.
kensaurus/skillsplan-aso
Plan-only ASO audit of App Store and Google Play listings: keywords, localized metadata, screenshots, ratings prompts. Use when "optimize our store listing", "improve app downloads", or "ASO". Submission readiness → plan-mobile-readiness.
kensaurus/skillsplan-backup-dr
Plan-only audit of whether a project can actually recover from data loss, not just whether backups exist. Use when "can we recover if the DB dies", "audit our backups", "what's our RPO/RTO", or "disaster recovery".
kensaurus/skillsplan-capacitor-hardening
Plan-only Capacitor native-layer security audit: WebView, token storage, deep links, OAuth, cleartext, exported activities. Use when "is my Capacitor app secure?". Store readiness → plan-mobile-readiness.
kensaurus/skillsplan-data-integrity
Plan-only audit of destructive-operation and migration safety. Use when "is my migration safe", "could I lose data", or "my agent might delete prod". Restore drills, RPO/RTO → plan-backup-dr. Code transforms → audit-codemod-safety.
kensaurus/skillsplan-dead-code
Plan-only dead-code audit: Knip baseline for unused files, exports, and deps, plus duplication, debug residue, suppressions, orphan assets, env drift. Deletes nothing. Use when "find dead code", "is this code used", or "unused exports".
kensaurus/skillsplan-dependency-provenance
Plan-only audit of dependencies for hallucinated or slopsquatted packages, supply-chain risk, and license gaps. Use when "check my dependencies", "is this package real", "slopsquatting", "SBOM", or "did the AI hallucinate a package".
kensaurus/skillsplan-docs-sync
Plan-only audit of documentation against actual code behavior. Use when "docs drift", "sync docs with code", "audit documentation", "stale README", "onboarding docs broken", "phantom docs", or "docs out of date". Decisions/ADRs → docs-adr.
kensaurus/skillsplan-error-handling
Plan-only audit of silent failures and observability gaps (Sentry, Langfuse). Use when "errors aren't showing in Sentry", "things fail silently", or "empty catch blocks". Apply patterns → backend-error-handling.
kensaurus/skillsplan-gtm
Plan-only GTM audit: monetization, positioning, activation funnel, SEO/AEO, distribution, and a founder interview. Use when "GTM", "go-to-market", "get more users", "grow traffic", or "should this be freemium". Execute → workflow-gtm.
kensaurus/skillsplan-input-validation
Plan-only trust-boundary audit for missing validation, injection, XSS, and forged requests across forms, APIs, and webhooks. Use when "validate my inputs", "is my app injection-safe?", "check my forms", or "can someone forge requests?".
kensaurus/skillsplan-llm-cost-guardrails
Plan-only audit of an LLM app's runaway-cost and quota-abuse exposure. Use when "cap my AI costs", "my LLM bill could blow up", "rate limit my AI", "token budget", "runaway agent loop", or hardening LLM features before launch.
kensaurus/skillsplan-mobile-readiness
Plan-only App Store / Google Play submission audit for Capacitor and RN: privacy, permissions, signing, target SDK. Use when "ready for App Store?" or "will Google Play reject this?".
kensaurus/skillsplan-perf-audit
Plan-only performance audit across web, mobile, backend, and data; measures first, fixes nothing. Use when "performance audit plan", "perf burndown", "measure before optimize", or "N+1 audit plan". Apply fixes → audit-performance.
kensaurus/skillsplan-pricing
Plan-only pricing audit: value metric, tiers, price points, free-tier boundary, annual and enterprise anchors, and a willingness-to-pay study. Use when "pricing strategy", "what should I charge", or "are we underpriced".
kensaurus/skillsplan-privacy-compliance
Plan-only audit mapping real personal-data flows to the privacy policy, GDPR, Japan APPI, and store labels. Use when "privacy compliance", "what data do we collect?", "App Store privacy labels", or before a consumer launch.
kensaurus/skillsplan-rls-audit
Plan-only Supabase/Postgres RLS and access-control audit. Use when "is my Supabase secure", "anyone can read my data", "lock down my tables", "service_role key", or "security advisor". Route gates → audit-auth-flows.
kensaurus/skillsplan-secrets-audit
Plan-only scan of the working tree and git history for exposed or mis-scoped keys, then a rotate-vs-relocate plan. Use when "hardcoded secrets", "did I commit a key", "secret scan", "is my .env safe", or "rotate keys".
kensaurus/skillsplan-security-audit
Plan-only OWASP Top 10 and Supabase-first hardening burndown. Use when "security audit plan", "OWASP audit", "hardening plan", or "security burndown". Auth flows → audit-auth-flows. RLS → plan-rls-audit. Keys → plan-secrets-audit.
kensaurus/skillsplan-stub-checker
Plan-only sweep for stubs, dead buttons, fake components, unwired handlers, and dead links, then a wiring plan. Use when "find dead buttons", "stub checker", "fake components", "unwired handlers", or "dead links".
kensaurus/skillsplan-test-coverage
Plan-only, user-story-driven test coverage audit. Use when "test coverage plan", "traceability matrix", "fake-green tests", or "what's not tested". Mutation score → test-mutation.
kensaurus/skillsplan-uiux-unification
Plan-only UI/UX and design-system audit that emits a unification burndown; no code until a phase is approved. Use when "audit UI without fixing", "UI burndown", or "IA audit before redesign". Apply now → housekeep-design.
kensaurus/skillsprotocol-browser-anti-stall
Guardrail for Playwright CLI sessions: headed, named, isolated; prevents parallel collisions and recovers stalls without scripted shortcuts. Read before browser work or when automation freezes.
kensaurus/skillsresearch
Research current practice with Context7, Firecrawl, and official docs before a non-trivial change: gap analysis and a file-mapped plan, no implementation. Use when "look up current docs" or before anything unfamiliar.
kensaurus/skillstest-exploratory
Headed exploratory QA of a live app as guest, then logged in, with junk input and navigation abuse. Use when "monkey test", "wander like a confused user", or "guest vs logged in". CRUD stories → test-qa. Hostile sweep → test-red-team.
kensaurus/skillstest-load
Design and run a k6 or Artillery load profile: throughput, latency percentiles, error rate, breaking point. Use when "load test this", "will it handle launch traffic", or "find the breaking point". Code-level resilience → audit-resilience.
kensaurus/skillstest-mutation
Run mutation testing (StrykerJS, mutmut) to measure whether tests assert behavior, not just execute lines. Use when "add mutation testing", "are our tests real", "can our test suite be gamed", or after an agent bulk-generated tests.
kensaurus/skillstest-playwright
Close the PDCA loop on this session's diff. Headed playwright-cli, fix as you go. Use when "test my changes", "PDCA this". Pixel diffs → test-visual-regression. Story CRUD → test-qa. Monkey / guest vs logged-in → test-exploratory.
kensaurus/skillstest-qa
Web-app CRUD and story QA when no project-specific skill applies. Use when "QA the app", "test CRUD", or "smoke test". Native → mobile-emulator-test. Guest vs logged in → test-exploratory. Pixel diffs → test-visual-regression.
kensaurus/skillstest-red-team
Red-team a running web, React Native, or Capacitor app. Use when "red team this app", "attack my app", "break it", "pentest the app", or "pre-launch hardening". Monkey test → test-exploratory.
kensaurus/skillstest-unit
Write unit and integration tests for a named module or change. Use when "write unit tests" or "add tests for this function". Coverage plan → plan-test-coverage. Mutation score → test-mutation. Browser check → test-playwright.
kensaurus/skillstest-visual-regression
Set up Playwright screenshot baselines and CI diffing so UI changes fail pixel by pixel instead of by eye. Use when "add visual regression tests" or "catch UI regressions". Functional clicks → test-playwright.
kensaurus/skillsthirdparty-emil-design-eng
Third-party skill — Emil Kowalski's design-engineering notes (animation craft, Sonner-style components). Use when the user names emil-design-eng or asks for that philosophy. Motion pass → enhance-motion.
kensaurus/skillsthirdparty-ui-ux-pro-max
Third-party skill — searchable style catalog, palettes, typography, and UX guidelines via Python scripts. Use when the user names ui-ux-pro-max or asks for a palette or font pairing from that catalog. Generic UI review → audit-ux.
kensaurus/skillsthirdparty-web-interface-guidelines
Third-party skill — Vercel Web Interface Guidelines compliance (focus, forms, animation, copy). Use when the user names Vercel or web interface guidelines. Generic a11y → audit-accessibility.
kensaurus/skillsworkflow-build-feature
Build a feature end to end: spec and TDD, implement, unit tests, Playwright check, PR. Use when "build a feature" or "implement this end-to-end". Spec/TDD loop only → workflow-spec-tdd. One bug → workflow-fix-and-ship.
kensaurus/skillsworkflow-coding-discipline
Guardrails for writing, editing, refactoring, or debugging code: surface assumptions, simplicity first, surgical changes. Use when vibe-coding keeps producing wrong results, or for "think before coding" or "surgical changes".
kensaurus/skillsworkflow-environment-ready
Prove runtimes, installs, tools, services, env names, and the repo's verification commands work before a long run. Use when "preflight the repo", "set up the environment", or tests cannot start. Failing tests → workflow-green-repo.
kensaurus/skillsworkflow-feature-flag
Plan and run a feature-flag rollout. Use when "add a feature flag", "gradual rollout", "staged release", "kill switch", "dark launch", "flag cleanup", "canary release", "rollback plan", or "deploy without switching on".
kensaurus/skillsworkflow-feedback-to-closure
Turn raw feedback — bug reports, review comments, Sentry, QA, audit output — into deduplicated tickets and drive each to verified closure. Use when "triage this feedback", "process the bug backlog", or "close the loop".
kensaurus/skillsworkflow-fix-and-ship
One bug-fix lifecycle: triage, reproduce, debug, regression test, fix, live check, PR, optional deploy verify. Use when "fix this bug and close the ticket", "patch this and ship", or a named production error. Many reports → workflow-feedback-to-closure.
kensaurus/skillsworkflow-git-commit
Create one conventional commit from an already-scoped change: stage the named files or hunks, write the message, commit, never push. Use when "commit these files" or "write a commit message". Whole tree to a PR → workflow-release-prep.
kensaurus/skillsworkflow-green-repo
Drive a repository to a green baseline — typecheck, lint, tests, and build passing from a clean checkout — when fixing is authorized. Use when "make the repo green", "get CI passing", or "fix all the failing tests".
kensaurus/skillsworkflow-grilling
Interview the user about a plan, decision, or idea one question at a time until you agree. Use when "grill me", "stress-test this plan", "interview me about this", "poke holes in this", "challenge my thinking", or before a non-trivial design.
kensaurus/skillsworkflow-gtm
Take a shipped repo to market: plan-gtm audit and interview, approval, then measure, message, activate, get found, launch, and a weekly loop. Use when "go to market", "grow users", or "increase traffic and visibility". Strategy only → plan-gtm.
kensaurus/skillsworkflow-housekeep
Repository maintenance: sync the README, remove confirmed dead artifacts, update dependencies safely. Use when "housekeep", "clean up repo", "update README", or "update dependencies". Unused exports → plan-dead-code. Parked work → housekeep-backlog.
kensaurus/skillsworkflow-launch-ready
Launch-preparation sweep for a new app or major release. Use when "prepare for launch", "launch week", "everything before going live", "is the app launch-ready?", or "pre-launch sweep". Working tree to a PR → workflow-release-prep.
kensaurus/skillsworkflow-merge-conflicts
Resolve an in-progress merge or rebase conflict by tracing each side back to its intent. Use when "resolve the conflicts", "fix this merge", "the rebase is stuck", or a pull has left conflict markers in the tree.
kensaurus/skillsworkflow-mobile-native-uiux
Full native UI/UX run on a Capacitor, Expo, or RN app: plumbing, native feel, a11y, device QA, PR. Use for "fix our mobile UI/UX", "native pass to a PR", or "feel native and ship".
kensaurus/skillsworkflow-onboard
First-contact orientation for an unfamiliar codebase. Use when "I'm new to this repo", "orient me", "explain this codebase", "what does this do?", "onboard me", "first day on this project", or "catch me up on the codebase".
kensaurus/skillsworkflow-parallel-agents
Run multiple agents in parallel via git worktrees, cloud agents, or multi-model comparison. Use for "run agents in parallel", "best-of-N", "compare approaches", "multi-model", "parallel worktrees".
kensaurus/skillsworkflow-pr
Manage an existing PR lifecycle — review, bot feedback, conflicts, merge. Use when opening a PR from an already-committed branch, addressing review, or merging. Uncommitted working tree to merge-ready → workflow-release-prep.
kensaurus/skillsworkflow-quality-gate
Pre-release quality gate across red-team, security, bundle size, performance, and unit tests. Use when "is this ready to ship?", "quality gate", or "pre-release checklist". Working tree to a PR → workflow-release-prep.
kensaurus/skillsworkflow-refactor
Scoped, behavior-preserving refactor: map dependencies, change structure, run affected tests. Use when "refactor this", "reduce duplication", or "improve readability". Dead code → plan-dead-code. Repo-wide smells → audit-code-quality.
kensaurus/skillsworkflow-release-prep
Take the local working tree to a merge-ready PR against main: review, split if needed, commit, push, open the PR, drive CI green; never merge. Use when "prepare this for a PR" or "get my working tree merge-ready". Existing PR → workflow-pr.
kensaurus/skillsworkflow-ship-and-observe
Take merged, green code to a verified, monitored production release. Use when "ship it", "deploy to production", "release this", "go live", "roll this out", "promote to prod", or "cut a release" for a running app (npm packages → deploy-npm).
kensaurus/skillsworkflow-spec-tdd
A spec → plan → TDD loop before writing a line. Use when "spec first", "TDD", "do it properly", or LLM output keeps being wrong. Feature through PR → workflow-build-feature. One bug → workflow-fix-and-ship.
kensaurus/skillsbabysit
Keep an already-open PR merge-ready: triage comments, resolve clear conflicts, fix CI. Do not merge. Dirty tree → merge-ready PR → workflow-release-prep. Create/merge PR lifecycle → workflow-pr.
kensaurus/skillscanvas
Create a live React canvas beside chat for standalone analytical artifacts that benefit from visual layout: quantitative/security/ architecture analyses, data-heavy timelines/charts/tables, interactive explorations, or repeatable tools. Do not use for simple prose or code changes.
kensaurus/skillscreate-hook
Create Cursor hooks. Use to create a hook, write hooks.json, add hook scripts, or automate behavior around agent events.
kensaurus/skillscreate-rule
Create Cursor rules for persistent AI guidance. Use when user wants to create a rule, add coding standards, project conventions, file-specific patterns, or mentions ".cursor/rules", "AGENTS.md", "cursor rule", "coding standard", "convention", or "AI guidance".
kensaurus/skillscreate-skill
Guide users through creating effective Agent Skills for Cursor. Use when user wants to create, write, update, or debug a skill, or asks about SKILL.md format, skill structure, ~/.cursor/skills/, or skill best practices.
kensaurus/skillscreate-subagent
Create custom subagents for specialized AI tasks. Use when the user wants to create a new type of subagent, set up task-specific agents, configure code reviewers, debuggers, or domain-specific assistants with custom prompts.
kensaurus/skillsmigrate-to-skills
Convert 'Applied intelligently' Cursor rules (.cursor/rules/*.mdc) and slash commands (.cursor/commands/*.md) to Agent Skills format (.cursor/skills/). Use when the user wants to migrate rules or commands to skills, convert .mdc rules to SKILL.md format, or consolidate commands into the skills directory.
kensaurus/skillsshell
Run the rest of a /shell request as a literal shell command. Use only when the user explicitly invokes /shell and wants the following text executed directly in the terminal.
kensaurus/skillssplit-to-prs
Split current work into small reviewable PRs. Use when the user asks to split a chat, branch, or change set. Whole dirty tree to one merge-ready PR → workflow-release-prep.
kensaurus/skillsstatusline
Configure a custom status line in the CLI. Use when the user mentions status line, statusline, statusLine, CLI status bar, prompt footer customization, or wants to add session context above the prompt.
kensaurus/skillsupdate-cli-config
View and modify Cursor CLI configuration in ~/.cursor/cli-config.json. Use to change CLI settings, configure permissions, switch approval mode, enable vim mode, toggle display options, configure sandbox, or manage any CLI preferences.
kensaurus/skillsupdate-cursor-settings
Modify Cursor/VSCode user settings in settings.json. Use when user wants to change editor settings, preferences, themes, font size, tab size, keybindings, or mentions "settings", "preferences", "theme", "font", "format on save", "auto save", or "cursor config".
kensaurus/skills