mushi-mushi: Skill for Cursor

.cursor/skills/mushi-integration/SKILL.md

mushi-integration is a skill for Cursor from kensaurus/mushi-mushi. It costs 82 tokens per session (1,592 once invoked), scanned A, original, MIT.

An end-to-end smoke test for the Mushi pipeline, which captures bug reports, classifies them with AI, maps them to stories, creates TDD tests, runs approved work, and checks the improvement cycle. TDD means writing tests before the code they verify.

In plain words
What is it for?
Use it to submit a test report, verify its classification, inspect story mapping, approve generated tests, execute the workflow, and check the results.
Why use it?
It checks whether the complete workflow works after setup or deployment, instead of testing only one stage.

Skill for Cursor

Written for Cursor: installed under .cursor/.

This is kensaurus/mushi-mushi's own configuration. It tells Cursor how to work on mushi-mushi itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything mushi-mushi configures →

Reuse

Borrowing it

Nothing to install: this file belongs to kensaurus/mushi-mushi. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/kensaurus/mushi-mushi/master/.cursor/skills/mushi-integration/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/kensaurus/mushi-mushi

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mushi-integration

README.md
[![agentmods](https://agentmods.dev/badge/skills/kensaurus/mushi-mushi/mushi-integration/github.svg)](https://agentmods.dev/skills/kensaurus/mushi-mushi/mushi-integration)
Your own site
<a href="https://agentmods.dev/skills/kensaurus/mushi-mushi/mushi-integration"><img src="https://agentmods.dev/badge/skills/kensaurus/mushi-mushi/mushi-integration/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for mushi-integration

Your own site · 80×15
<a href="https://agentmods.dev/skills/kensaurus/mushi-mushi/mushi-integration"><img src="https://agentmods.dev/badge/skills/kensaurus/mushi-mushi/mushi-integration.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 82 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,592 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00082 $0.01592
Opus 5 $0.00041 $0.00796
Sonnet 5 $0.00016 $0.00318
Haiku 4.5 $0.00008 $0.00159

Measured 9d ago against content hash d980ab7bb5be, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

mushi-integration scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/skills/mushi-integration/SKILL.md · 241 lines

How it starts

The opening of the file, as written. The whole thing — 241 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Mushi Integration Smoke Test

Exercises every stage of the Mushi pipeline end-to-end. Run after setup, after a deploy, or any time you need proof that the whole loop works.

Prerequisites

  • mushi doctor passes (all green) — run mushi-health first if unsure.
  • At least one BYOK key for anthropic and firecrawl is active.
  • You have the app URL you want to map stories from.

Stage 1 — Bug capture

Send a real test report through the SDK pipeline:

mushi test

Expected: Test report submitted — id: rep_...

Verify in DB (Supabase MCP):

SELECT id, status, severity, category, created_at
FROM reports
ORDER BY created_at DESC LIMIT 1;

Expected: a row with status = classified and a non-null severity within ~30 seconds.
If still pending after 60 s: classify-report edge function failed — check get_logs(service: 'api').


Stage 2 — AI triage

Confirm the classifier ran:

mushi reports list --limit 1

Expected output includes severity, category, and blast_radius.

Verify via MCP:

get_report_detail(reportId)

Confirm classification.severity and classification.category are set.


Stage 3 — Story mapping

Map user stories from a live URL:

mushi stories map --url https://your-app.com --wait

--wait polls until the crawl finishes (usually 30–90 s). Expected terminal output:

✓  Crawled 12 pages
✓  Claude drafted 8 user stories
✓  Proposal created: prop_...
Open in console → Inventory → Discovery → Past proposals

Verify in DB:

SELECT id, source, status, pages_crawled, created_at
FROM inventory_proposals
ORDER BY created_at DESC LIMIT 1;

Expected: source = 'live_crawl', status = 'pending_review'.

Accept the proposal in the Mushi console (Inventory → Discovery → Past proposals → Accept), or via CLI when the accept command is available.


Stage 4 — TDD test generation

Pick a story id from the accepted inventory and generate a Playwright test:

Read the full file on GitHub · 241 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 241 lines · 82 tokens per session scan A d980ab7bb5be

Subscribe to this mod's changes

mushi-integration is a skill published in the GitHub repository kensaurus/mushi-mushi (3 stars, last pushed today), licensed MIT. It adds 82 tokens to every session and 1,592 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

nw-ad-critique-dimensions

Review dimensions for acceptance test quality - happy path bias, GWT compliance, business language purity, coverage completeness, walking skeleton user-centricity, priority validation, observable behavior assertions, traceability coverage, and walking skeleton boundary proof.

nWave-ai/nWave · 53 tokens

nw-bdd-methodology

BDD patterns for acceptance test design - Given-When-Then structure, scenario writing rules, pytest-bdd implementation, anti-patterns, and living documentation.

nWave-ai/nWave · 36 tokens

testing

TDD/BDD testing principles. Use when writing tests, reviewing test coverage, setting up testing, or discussing test strategy and test architecture.

TheBeardedBearSAS/claude-craft · 30 tokens

review-screenshot

A standard workflow for taking screenshots to check a user interface, using a dedicated review process for different verification modes.

YuDefine/nuxt-supabase-starter · 75 tokens

testing-expert

Expert-level software testing with unit tests, integration tests, E2E tests, TDD/BDD, and testing best practices. Use when the user mentions TDD, BDD, unit tests, integration tests, or end-to-end tests, or when the task involves Testing Fundamentals, Unit Testing, Integration Testing, or End-to-End Testing.

personamanagmentlayer/pcl · 73 tokens

qa

QA workflow that validates a running application against Gherkin user stories. Use when running /qa or /qa:new-story, writing user stories under docs/user-stories/, decomposing Gherkin scenarios into Playwright and Tidewave validation work, mapping Given/When/Then to a RED/GREEN TDD loop, or filing observed behavior…

vinnie357/claude-skills · 76 tokens