Cursor Subagent

Contract

• Cursor is a sidecar: an external cursor-agent --print process with its own session id, tools, auth, and workspace.
• Read-only is default: use ask for exploration/review and plan for planning.
• Implementation uses agent mode only in an isolated branch, worktree, or scratch workspace.
• Parent agent reviews all reports or diffs before integration.
• The active workspace authority contract governs credentials, production mutations, external sends, account actions, destructive operations, and final confirmation. Include that contract in any sidecar prompt that may reach those surfaces. Without one, stay read-only and stop before external effects.

Preamble

Set SKILL_DIR to this skill directory, then run: