cursor-plugin-headroom

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS

Full Analysis

[COMMAND_EXECUTION]: The skill defines hooks in hooks.json that automatically run the shell command headroom init hook ensure at session start and prior to using shell tools like Bash or PowerShell.
[EXTERNAL_DOWNLOADS]: The skill's requirements mention installing the headroom-ai[all] package from PyPI, which is a standard dependency for the proxy tool the skill integrates.

Audit Metadata

Risk Level

SAFE

Analyzed

Aug 27, 2026, 04:45 PM

Security Audit — agent-trust-hub — cursor-plugin-headroom