cursor-api-key-management
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The documentation includes shell commands such as
curlfor verifying API key connectivity andchmod 600for securing local configuration files. These are presented as manual steps for the user or agent to perform during setup and troubleshooting. - [DATA_EXPOSURE]: The skill references sensitive file paths (e.g.,
~/.config/Cursor/User/settings.json) and environment variables (OPENAI_API_KEY). This information is used strictly to guide the user in locating and securing their personal API credentials and does not involve automated extraction. - [SAFE]: All external links and resources provided in the skill point to the author's verified domains (e.g., jeremylongshore.com, intentsolutions.io) or to official documentation from trusted model providers like OpenAI and Anthropic. All API key examples are generic placeholders.
Audit Metadata