cursor-performance-tuning
Warn
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill includes instructions to use sudo to modify system-level configuration files on Linux to increase file watcher limits. Evidence: The command
echo "fs.inotify.max_user_watches=524288" | sudo tee -a /etc/sysctl.confandsudo sysctl -pare provided inSKILL.mdunder the Linux File Watcher Limits section. - [COMMAND_EXECUTION]: The skill provides several bash commands for system monitoring and cache maintenance. Evidence: Use of
top,ps,pgrepfor monitoring andrm -rfon specific Cursor configuration and cache directories (e.g.,~/Library/Application Support/Cursor/Cache/) inSKILL.mdandreferences/system-resource-management.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes user requests regarding IDE performance symptoms and has the capability to execute shell commands and modify files, creating a surface for indirect instructions to influence system state. 1. Ingestion points: User-provided performance symptoms and baseline measurements described in
SKILL.md. 2. Boundary markers: The skill does not define clear delimiters or specific warnings to ignore instructions embedded in user-supplied data or workspace files. 3. Capability inventory: The skill utilizesBash(cmd:*),Read,Write, andEdittools as defined in the frontmatter ofSKILL.md. 4. Sanitization: No explicit sanitization or validation of user-supplied symptoms or workspace-specific data is described before being used in the diagnostic workflow.
Audit Metadata