Cursor plugin for Claude Code: delegation and code review via the Cursor CLI.
Built and maintained by Xmartlabs.
- Node.js >= 22
- The Cursor CLI (
cursor-agent, oragent) installed and on yourPATH - An authenticated Cursor account (see Authentication Setup below)
Add the plugin marketplace:
/plugin marketplace add xmartlabs/cursor-plugin-ccInstall the cursor plugin:
/plugin install cursor@xmartlabs-cursor/cursor:review
Runs a read-only Cursor review against your current git changes (staged, unstaged, and untracked), in a disposable snapshot rather than your live tree. Output looks like:
Verdict: concerns
Findings:
- [MAJOR] Missing null check before dereference (src/handlers/auth.js:42)
Rationale: `session.user` can be undefined when the token has expired, which throws instead of returning a 401.
Suggestion: Guard with `if (!session?.user) return res.status(401).end()` before use.
---
transport=acp session=a1b2c3 model=composer-2.5 cursorVersion=1.4.2
snapshotHash=9f3a... reviewedPaths=6 truncated=false
For a harder-edged pass that challenges the implementation approach and design choices, use /cursor:adversarial-review instead.
/cursor:task add rate limiting to the /login endpoint
Hands the request to Cursor (default model: composer-2.5), which edits your working tree directly and reports back what it changed. Add --background to run it as a background job (see /cursor:status and /cursor:result), or --propose-only for a read-only plan without edits.
| Command | Description |
|---|---|
/cursor:review |
Run a Cursor code review against local git state. |
/cursor:adversarial-review |
Run a Cursor review that challenges the implementation approach and design choices. |
/cursor:task |
Delegate an implementation, investigation, or fix request to Cursor. |
/cursor:status |
Show active and recent Cursor jobs for this repository. |
/cursor:result |
Show the stored final output for a finished Cursor job in this repository. |
/cursor:cancel |
Cancel an active background Cursor job in this repository. |
/cursor:setup |
Check whether the local Cursor CLI is ready and optionally toggle the stop-time review gate. |
The plugin drives the Cursor CLI (cursor-agent, or agent if that's what's on your PATH), so it needs that CLI installed and authenticated first:
cursor-agent loginAlternatively, set CURSOR_API_KEY or CURSOR_AUTH_TOKEN in your environment.
Run /cursor:setup at any time to check whether the binary is installed and authenticated.
Please be aware of the following:
- Code Review Content: Review diff content is sent to Cursor's backend for processing.
- Permission Model: ACP (Anthropic Code Plugin) permission denial is not an OS-level boundary; the plugin operates with the permissions granted by Claude Code.
- Task Execution: Tasks edit your working tree directly with no OS-level sandbox in v1. Ensure you review all task operations before execution.
Licensed under Apache License 2.0. See LICENSE and NOTICE for details.