cursor-install-auth

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The Linux install steps fetch and then execute binaries from https://download.cursor.com/linux/appImage/x64 (and the related https://download.cursor.com/linux/deb/x64 and https://cursor.com/download), so the skill uses runtime-fetched external code that is executed and required for the install.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs running "sudo dpkg -i cursor.deb" (and other system-level install steps), which asks for elevated privileges and modifies the machine state.