strip-made-with-cursor
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill involves creating and executing a bash script (
strip-made-with-cursor.sh) and modifying the Cursor configuration file (hooks.json). These actions are performed to implement the intended hook functionality and are clearly documented. - [DATA_EXFILTRATION] (SAFE): The script processes tool input data via standard input and output. Analysis of the code confirms it contains no network commands (e.g., curl, wget) and only performs local string replacements.
- [REMOTE_CODE_EXECUTION] (SAFE): No external dependencies are downloaded or executed. The skill relies on the locally available
jqpackage for JSON processing and provides a fallback mechanism if it is missing.
Audit Metadata