reset-cursor-acp

Warn

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a bash script scripts/reset-cursor-acp.sh which contains several system-level commands.
  • Evidence: Use of ps, grep, kill -TERM, and kill -KILL to manage cursor-agent processes.
  • Evidence: Execution of the bb CLI and cursor-agent binary to check status and versions.
  • [PRIVILEGE_ESCALATION]: The skill mentions that if sandboxing blocks ps, the user should rerun the script outside the sandbox, which is a recommendation to lower security boundaries.
  • Evidence: SKILL.md text: "If sandboxing blocks ps with 'operation not permitted', rerun the script outside the sandbox."
  • [REMOTE_CODE_EXECUTION]: The script uses python3 -c for inline processing of JSON data from a command-line tool, which is a form of dynamic execution but targets local data.
  • Evidence: SKILL.md contains a snippet using python3 -c 'import json,sys; ...' to parse thread IDs.
  • [SAFE]: The network operations mentioned (cursor-agent login, bb updates) are part of the intended functionality for the Cursor and bb tools and do not involve untrusted third-party domains or sensitive data exfiltration.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 20, 2026, 06:50 AM