cursor

Warn

Audited by Socket on Jun 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Overall benign-to-suspicious but best classified as SUSPICIOUS due to a third-party connector prerequisite and unexplained 'zero' troubleshooting path around an otherwise official Cursor API workflow. The main capabilities match the stated purpose and data mostly flows to Cursor, but the autonomous repo-agent behavior and external credential-management context increase risk.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 14, 2026, 01:54 AM
Package URL
pkg:socket/skills-sh/vm0-ai%2Fvm0-skills%2Fcursor%2F@d8ef911a0b420107d1d308de509aa5444e94c562ddf29b605665e48b501a79d3
Security Audit — socket — cursor