cursor-skills-system
Warn
Audited by Socket on May 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core purpose is benign documentation for Cursor skills, but the distribution guidance introduces a transitive skill-install path whose CLI provenance is inconsistent with the official spec publisher. No direct malware or exfiltration is present, yet the install/trust model is riskier than the stated documentation role suggests.
Confidence: 91%Severity: 66%
Audit Metadata