groove-admin-cursor-hooks
Warn
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: MEDIUMPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONTIME_DELAYED_CONDITIONAL
Full Analysis
- [PERSISTENCE]: The skill's primary function is to register hooks in
.cursor/hooks.json. These entries ensure that specific shell scripts are executed automatically by the editor environment across different sessions whenever lifecycle events (session start, stop, or tool use) occur. - [DYNAMIC_EXECUTION]: The skill generates several shell scripts, including
daily-end-reminder.shandgit-activity-buffer.sh, and writes them to the.groove/hooks/cursor/directory. It useschmod +xto make these generated files executable by the system. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by ingesting data that may be presented to the agent in future sessions.
- Ingestion points: The
git-activity-buffer.shandblock-managed-paths.shscripts read tool invocation metadata from standard input. Thesession-capture.shscript collects local git logs and diffs. - Boundary markers: The generated
pending-capture.mdfile, which is intended for agent review in subsequent sessions, does not use specific delimiters or instructions to ignore potentially malicious content embedded in git commit messages or diffs. - Capability inventory: The skill has the ability to write files and configure automated shell command execution via editor hooks.
- Sanitization: While scripts use
grepandpython3for basic parsing, the raw output of git commands is written directly to markdown files processed by the agent. - [COMMAND_EXECUTION]: The skill configures the environment to execute local scripts from other components, such as
groove-utilities-prime.shandcheck.sh, located within the.agents/skills/directory. - [TIME_DELAYED_CONDITIONAL]: The
version-check.shhook includes logic to only execute its primary payload once every 3600 seconds (one hour), gating its execution based on a timestamp stored in a local cache file.
Audit Metadata