workflows:review command hidden by Cursor's reserved `review` name

[simonstephens]

Problem

The /workflows:review command does not appear in Cursor's slash command list. All other commands in the same commands/workflows/ directory (brainstorm, plan, work, compound) show up fine.

Root Cause

Cursor reserves the name review for its built-in Agent Review feature (introduced ~v2.2.9). This prevents any plugin command containing review in its name from appearing in the command picker. The frontmatter, encoding, permissions, and file structure are all correct — it's purely a naming collision.

References:

• [BUG] Builtin /review command no longer works, told to install a plugin and use /code-review anthropics/claude-code#13960 (documents review as reserved)
• https://cursor.com/docs/agent/review (Cursor's built-in review feature)

Suggested Fix

Rename the command from workflows:review to workflows:code-review (or similar). This requires updating:

1. Filename: commands/workflows/review.md → commands/workflows/code-review.md
2. Frontmatter: name: workflows:review → name: workflows:code-review
3. 18 text references across 10 other files:
   • CLAUDE.md (2 refs)
   • README.md (1 ref)
   • CHANGELOG.md (5 refs)
   • skills/git-worktree/SKILL.md (3 refs)
   • skills/setup/SKILL.md (2 refs)
   • skills/file-todos/SKILL.md (1 ref)
   • commands/test-xcode.md (2 refs)
   • commands/slfg.md (1 ref)
   • commands/lfg.md (1 ref)

Workaround

Users can apply the rename manually in ~/.cursor/plugins/cache/cursor-public/compound-engineering/.../, but it gets overwritten on plugin updates.

Environment

• Cursor version: latest (March 2026)
• Plugin version: v2.33.0 / v2.34.0
• OS: macOS

[tmchow]

We've recently yanked the "workflow:*" commands. The issue is the cursor marketplace plugin isn't updating but @kieranklaassen is digging in. The plugin is on 2.45+ and cursor marketplace is stuck on 2.33/2.34.

In interim @simonstephens, can you try uninstalling and reinstalling to see if you get 2.45+?

[simonstephens]

Tried the uninstall/reinstall — unfortunately it doesn't help. Here's what I found by digging into the Cursor internals:

Root cause: The Cursor marketplace API (listEnabledPlugins) returns the old commit hash e1906592cbd49889beb82e1be76359398b6d3d58 (v2.33.0). On every restart, if the cache directory at ~/.cursor/plugins/cache/cursor-public/compound-engineering/<hash>/ is missing, Cursor does a fresh shallowClone of that exact commit. So deleting the cache just causes it to re-download the old version.

From the Cursor Plugins log:

marketplace listEnabledPlugins completed in 1120.9ms (2 plugins)
shallowClone https://github.com/EveryInc/compound-engineering-plugin@e1906592cbd49889beb82e1be76359398b6d3d58 completed in 957.2ms

The hash is coming from the marketplace API response, not from any local config.

Workaround that sticks: Instead of deleting the old cache directory, I replaced its contents with v2.46.0 files (cloned from main, copied plugins/compound-engineering/* into the old hash directory). Cursor sees the directory exists and skips the re-download, but the actual files inside are v2.46.0. Confirmed ce:review shows up correctly after restart.

So the fix needs to happen on the marketplace/registry side — whatever is serving e1906592... as the current commit for compound-engineering needs to be updated to point at the latest.