---
title: "wave-cursor-plugin"
description: "WAVE review plane for Cursor: multi-reviewer code verdicts and the armed vuln-scan pattern"
canonical: https://agentpluginsdirectory.com/plugins/wave-cursor-plugin
last-updated: 2026-09-21
---

# wave-cursor-plugin
WAVE review plane for Cursor: multi-reviewer code verdicts and the armed vuln-scan pattern
- Slug: wave-cursor-plugin
- Publisher: WAVE Online, LLC
- Repository: https://github.com/wave-av/wave-cursor-plugin
- Manifest: plugin.json
- Version: 0.1.0
- License: Apache-2.0
- Category (editorial): other
- Skills: 2 (wave-review, wave-vuln-scan)
- MCP servers: 0
- Stars: 0
- Repository created: 2026-09-11
- Repository last pushed: 2026-09-18
- Publisher type: Organization
- Listing: https://agentpluginsdirectory.com/plugins/wave-cursor-plugin
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What wave-cursor-plugin does, in the publisher's words

WAVE agent plugin for Cursor (Agent Plugins open standard): review-plane and vuln-scan skills. Secret-free by design: callers supply their own REVIEW_PLANE_KEY.

- plugin.json: Agent Plugins manifest
- skills/wave-review/: multi-reviewer verdicts via the WAVE review plane (MCP review/summarize_review or REST POST /v1/review)
- skills/wave-vuln-scan/: the armed scan pattern (Semgrep sweep + validated tracing + persistent finding memory)

Copy this repo to ~/.cursor/plugins/local/wave-cursor-plugin and reload the window (or Developer: Reload Window). Confirm the skills appear under Customize.

Marketplace submission is manual review at cursor.com/marketplace/publish. Requires the repo public + a human submitter.

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/wave-av/wave-cursor-plugin/HEAD/README.md

## Skills

- wave-review: Get a multi-reviewer verdict on a repo or PR from WAVE's review plane (correctness, security, cross-file, design). Use for second-opinion reviews, pre-merge gates, or auditing agent-generated code.
- wave-vuln-scan: Run the armed vulnerability-scan pattern: Semgrep MCP sweep plus validated manual tracing with persistent finding memory. Use for scheduled security reviews or pre-release audits.

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.