What problem does it solve?
Delegating code changes to Cursor Composer is risky because cursor-agent has no real sandbox: file writes are not confined to the workspace and its allowlists are bypassable. This Skill wraps the delegation in a containment pipeline so untrusted Cursor output never reaches your main branch unreviewed.
Core Features & Use Cases
- Isolated execution: Creates a dedicated git worktree (
.claude/worktrees/cursor-do-<id>) and runs cursor-companion.sh task --write inside it, keeping the main tree untouched.
- Lead diff review gate: Auto-commits Composer's dirty changeset, then requires a full diff review plus contract-grep checks (support-claim wording, consistency, plugin validation) before anything merges.
- Safe merge path: Cherry-picks exactly one commit by SHA into the base branch, updates the
cc:done [<sha>] marker in Plans.md, and cleans up the worktree.
- Use Case: Ask the agent to "delegate the login form validation refactor to Cursor" — it spins up a worktree, has Composer implement the change, reviews the diff for scope creep or secrets, cherry-picks the result, and marks the task done in Plans.md.
Quick Start
Ask the agent to delegate a single implementation task to Cursor Composer, for example: use cursor:do to add login form validation to the auth module.