Thermos

Installing it

/add-plugin thermos

Read from the plugin's own README, under "Installation".

All three of its skills set disable-model-invocation: true, so the agent never reaches for them on its own — you invoke them by name.

Cursor’s documented route works for any marketplace plugin regardless: open Customize in the sidebar, find the plugin, select Install, and choose project or user scope.

What it needs

• Cursor subagents — the orchestrator invokes both review subagents through Task, in one message, in the background.
• A diff to review: the documented flow gathers git diff main...HEAD plus the full contents of the changed files before either subagent starts.

The 3 skills it ships

Each name below is the skill's own directory name, and each description is drawn from that skill's own frontmatter or the plugin's README — not rewritten from the marketplace listing.

• thermosmanual onlyThe orchestrator: launches both review subagents in parallel, then synthesizes prioritized, deduplicated findings.
• thermo-nuclear-reviewmanual onlyComprehensive security and correctness audit of a branch's changes — bugs, breaking changes, security issues, devex regressions, feature-gate leaks.
• thermo-nuclear-code-quality-reviewmanual onlyAn extremely strict maintainability review: abstraction quality, giant files, and spaghetti-condition growth.

Subagents

Cursor subagents the plugin ships. A plugin can carry these; a standalone skill cannot.

• thermo-nuclear-review-subagentDiff-scoped Task subagent for the deep-review rubric, invoked after a parent has gathered the diff and file contents.
• thermo-nuclear-code-quality-review-subagentDiff-scoped Task subagent for the code-quality rubric, loaded from the matching skill.

Related entities

Cursor plugins

• Cursor Team KitCursor's own 18-skill kit for CI, code review, shipping, and verification, plus two subagents and two TypeScript rules — deliberately built to work without third-party service integrations.
• PR Review CanvasA single-skill Cursor plugin that renders a pull request diff as a Cursor Canvas organized by reviewer value — core logic in full, wiring condensed, boilerplate summarized.
• pstackA 44-skill, two-subagent Cursor plugin built around one sticky mode that matches a request to a named playbook and applies a stated engineering principle at each step.

Skills profiled on this site

• review-agentCodex's bundled skill for reviewing changes — the current in-box option, no install needed.
• Cursor's built-in review skills/review, /review-bugbot, and /review-security ship with Cursor by default — general review, automated bug-hunting review, and a security-focused review, with nothing to install.

Sources and provenance

Everything on this page was read from primary sources published by Cursor: the plugin’s own .cursor-plugin/plugin.json manifest, its README, and the frontmatter of every skill, subagent it ships, plus the repository’s marketplace manifest for the quoted listing copy. Last checked on August 20, 2026.

Cursor’s marketplace copy for this plugin reads: “Thermo-nuclear branch review: deep security/correctness audits, harsh code-quality rubrics, parallel subagents, thermos orchestration, and optional merge-ready PR flows.” — quoted, not assessed.

• The README documents a migration: cursor-team-kit previously carried only thermo-nuclear-code-quality-review, and it asks you to remove the team-kit entries once Thermos is installed. The file is nonetheless still present in cursor-team-kit as of this check, so the duplicate is real rather than historical.
• The manifest's marketplace copy mentions "optional take-the-wheel and FSD merge-ready flows." No skill, subagent, or README section in the plugin directory documents those, so nothing is claimed about them here.

Nobody here has installed or run this plugin. Version numbers and component lists are a snapshot and will drift — the source directory is authoritative. Cursor states that every marketplace plugin is manually reviewed before listing; the criteria are not published in detail and have not been audited here.