delegate-to-cursor-sdk

SUSPICIOUS. The skill’s stated purpose aligns with delegation to Cursor, and its local auth/dashboard/session controls are internally coherent, but the trust model hinges on an independent cursor-delegate CLI whose official provenance was not established. Because that external executable receives repository context and Cursor API credentials, the skill carries high supply-chain and credential-forwarding risk despite otherwise careful guardrails.