cursor-skills-system

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is benign documentation for Cursor skills, but the distribution guidance introduces a transitive skill-install path whose CLI provenance is inconsistent with the official spec publisher. No direct malware or exfiltration is present, yet the install/trust model is riskier than the stated documentation role suggests.

Confidence: 91%Severity: 66%
Audit Metadata
Analyzed At
May 3, 2026, 08:30 AM
Package URL
pkg:socket/skills-sh/HKTITAN%2Fcursor-sdk%2Fcursor-skills-system%2F@8cc435bddd7b8c755d81c44f143d802f96ff4b24