cursor-performance-tuning

Warn

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill includes instructions to use sudo to modify system-level configuration files on Linux to increase file watcher limits. Evidence: The command echo "fs.inotify.max_user_watches=524288" | sudo tee -a /etc/sysctl.conf and sudo sysctl -p are provided in SKILL.md under the Linux File Watcher Limits section.
  • [COMMAND_EXECUTION]: The skill provides several bash commands for system monitoring and cache maintenance. Evidence: Use of top, ps, pgrep for monitoring and rm -rf on specific Cursor configuration and cache directories (e.g., ~/Library/Application Support/Cursor/Cache/) in SKILL.md and references/system-resource-management.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user requests regarding IDE performance symptoms and has the capability to execute shell commands and modify files, creating a surface for indirect instructions to influence system state. 1. Ingestion points: User-provided performance symptoms and baseline measurements described in SKILL.md. 2. Boundary markers: The skill does not define clear delimiters or specific warnings to ignore instructions embedded in user-supplied data or workspace files. 3. Capability inventory: The skill utilizes Bash(cmd:*), Read, Write, and Edit tools as defined in the frontmatter of SKILL.md. 4. Sanitization: No explicit sanitization or validation of user-supplied symptoms or workspace-specific data is described before being used in the diagnostic workflow.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 9, 2026, 03:43 AM