cursor

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the install source is legitimate and same-vendor documented, so this is not malware-like distribution. But the skill’s real footprint is a Membrane integration layer that brokers Cursor access and credentials through third-party infrastructure, which is only partially aligned with a skill presented as 'Cursor integration.'

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 16, 2026, 11:55 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fcursor%2F@bf283279c14d90460bc392153a6f284b0aa60c8a488460f55ac575726f99693f
Security Audit — socket — cursor