cursor-usage
>-
Install this skill
or
84/100
Security score
The cursor-usage skill was audited on Aug 24, 2026 and we found 4 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 17
Access to home directory dotfiles
SourceSKILL.md
| 15 | Three rulers live in the same payload. Mixing them once makes the report wrong. |
| 16 | |
| 17 | **REQUIRED SUB-SKILL:** Read the canvas skill (`~/.cursor/skills-cursor/canvas/SKILL.md`) before writing the canvas. |
| 18 | |
| 19 | ## Three rulers |
low line 55
Access to home directory dotfiles
SourceSKILL.md
| 53 | |
| 54 | ```bash |
| 55 | python3 ~/.agents/skills/cursor-usage/scripts/fetch_cursor_usage.py |
| 56 | ``` |
| 57 |
medium line 77
Access to home directory dotfiles
SourceSKILL.md
| 75 | ### 3. Titles |
| 76 | |
| 77 | - Cursor: `~/.cursor/projects/*/agent-transcripts/<id>/*.jsonl` (roll subagents into the parent) |
| 78 | - Grok Bot: `~/Library/Application Support/Grok Bot/sand-client-persistence/*.blob` rows |
| 79 | - Cloud: `state.vscdb` key `cloudAgentRepository.agents*` |
medium line 85
Access to home directory dotfiles
SourceSKILL.md
| 83 | ### 4. Canvas |
| 84 | |
| 85 | Path: `~/.cursor/projects/<workspace>/canvases/cursor-usage.canvas.tsx` (stable name, overwrite). Import only `cursor/canvas`. Inline data. No `fetch()`. |
| 86 | |
| 87 | **Required order:** |
Scanned on Aug 24, 2026
View Security Dashboard