cursor-usage-analytics
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches usage statistics and team data from the official Cursor API (api.cursor.com) as documented in the analytics integration examples.
- [COMMAND_EXECUTION]: Documentation includes example shell commands using curl to query metrics from the analytics provider.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and aggregate external data from the Cursor analytics platform.
- Ingestion points: Data enters the context via API responses from api.cursor.com as described in references/analytics-api.md.
- Boundary markers: Instructions in SKILL.md provide explicit logical boundaries, directing the agent to use purpose-limited aggregate data and avoid inspecting individual user content.
- Capability inventory: The skill utilizes shell command capabilities to interact with the external API endpoints.
- Sanitization: The skill employs clear natural language instructions to ensure the agent aggregates and redacts sensitive information during report generation.
Audit Metadata