cursor-delegate

SUSPICIOUS. The skill’s purpose and main Cursor usage are coherent, but its footprint expands through a transitive third-party codex-background install/bootstrap path and a highly privileged delegated agent workflow. This is not confirmed malware, yet the combination of same-org curl-install hygiene issues, third-party skill installation, and autonomous write-capable execution makes the overall security risk high.