cursor avatar

Thermo Nuclear Review

When you need a security and correctness audit that catches everything before merge, this is your heavy artillery. It scans branch diffs for bugs, breaking changes, security vulnerabilities, developer experience regressions, and feature flag leaks. The prompting is aggressive about thoroughness and includes specific guidelines to avoid false positives on breaking changes that are intentional, plus it cross-references existing PR comments from other bots to incorporate their findings. The "thermo nuclear" name fits. Use this when you're genuinely worried about subtle breaking changes in complex codebases with cross-module dependencies, not for routine reviews where you'll burn trust with over-reporting.

skills.sh installs
2.8K
GitHub stars
15.9K
last updated
Aug 21, 2026

Install

$ npx -y skills add cursor/plugins --skill thermo-nuclear-review --agent claude-code

Installs into .claude/skills of the current project.

Files

Thermo Nuclear Review

Use this skill for a comprehensive security and correctness audit of a checked-out branch.

Prompt

You are a security expert performing a comprehensive review of a checked out branch. Audit this branch and its changes extremely thoroughly for bugs, changes that break existing features/functionality, and security vulnerabilities. Be EXTREMELY thorough, rigorous, careful, ambitious, and attentive. NOTHING can slip through.

Scope

ONLY report issues related to code that is being ADDED or MODIFIED in this PR. Focus on changes in the diff. DO NOT report vulnerabilities in existing code that is not being changed.

Guidelines

Breaking Functionality Guidelines

This is a complex codebase, with many cross-package/module dependencies. Often simple code changes in one place have subtle interactions that break functionality elsewhere. You MUST be extremely thorough in tracing through possible side effects of the changes.

Sponsors

Details

Repository
github.com/cursor/plugins
Categories
Security, Git & Pull Requests, Code Review & Quality
First seen
Jun 23, 2026

More from cursor/plugins

All 47

Recommended

More Security
1dynatrace avatardt-obs-kubernetesdynatrace/dynatrace-for-aiKubernetes cluster, pod, node, and workload monitoring. Use when analyzing K8s health, resource optimization, pod failures, OOMKills, scheduling, or security po2.8Kskills.sh installs
2forcedotcom avatargenerating-mermaid-diagramsforcedotcom/sf-skillsSalesforce architecture diagrams using Mermaid with ASCII fallback. Use this skill when generating text-based diagrams for Salesforce architecture, OAuth flows,2.8Kskills.sh installs
3coinbase avataragentic-walletcoinbase/agentic-wallet-skillsCrypto wallet operations via the awal CLI — sign in, check balances, send USDC/ETH/POL/SOL, trade tokens, fund the wallet, and use the x402 payment protocol to 2.8Kskills.sh installs
4payloadcms avatarpayloadpayloadcms/payloadUse when working with Payload projects (payload.config.ts, collections, fields, hooks, access control, Payload API). Use when debugging validation errors, secur2.7Kskills.sh installs
5elastic avatarcloud-create-projectelastic/agent-skillsCreates Elastic Cloud Serverless projects (Elasticsearch, Observability, or Security) via the REST API, saves credentials to file, and bootstraps a scoped Elast2.7Kskills.sh installs
6dynatrace avatardt-obs-awsdynatrace/dynatrace-for-aiAWS cloud resource monitoring including EC2, RDS, Lambda, ECS/EKS, VPC networking, load balancers, S3, DynamoDB, SQS/SNS, and cost optimization. Use when analyz2.7Kskills.sh installs