cursor-compliance-audit
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from the local filesystem (codebase files, configuration files like .cursorignore, and sensitive files like .env) to perform security audits. This creates a surface for indirect prompt injection where malicious instructions embedded in these files could influence agent behavior.
- Ingestion points: The agent uses the
Readtool andBashcommands (e.g.,grep,find,cat) to ingest content from the project directory. - Boundary markers: The instructions do not define specific delimiters or "ignore embedded instructions" warnings for the content read from the files.
- Capability inventory: The skill has access to
Read,Write,Edit, and fullBashcommand execution capabilities. - Sanitization: There is no evidence of sanitization or filtering of the content read from files before it is processed by the agent.
Audit Metadata