cursor-subagent

SUSPICIOUS: the skill’s capabilities broadly match its purpose, but its footprint is large for an agent skill: it installs and runs a daemon/bus/gateway stack, auto-reads secrets from .env files, and can trigger persistent local or cloud automations that act on repositories. The main concern is elevated execution and credential-handling risk rather than clear malicious intent.