nuke-cursor-app
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses several powerful system commands including
osascriptto quit applications,pkillandkill -9to terminate processes by name or PID, andopen -ato restart the IDE. It also utilizessqlite3to query local data andmkdirto manage log directories. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from a local SQLite database and system process listings to generate reports, creating a vulnerability surface.
- Ingestion points: The skill reads data from
cursor-metrics.sqlite3and the output of thepscommand as defined inSKILL.md. - Boundary markers: No explicit delimiters or boundary instructions are used when interpolating this external data into the agent's summary report.
- Capability inventory: The skill possesses capabilities to terminate system processes (
pkill,kill), execute UI scripts (osascript), and launch applications (open). - Sanitization: There is no evidence of sanitization or validation of the data retrieved from the SQLite database before it is ingested into the agent context.
Audit Metadata