registry / @cursor/sdk / 1.0.30
@cursor/sdk@1.0.30
TypeScript SDK for Cursor agents.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiSource inspection shows a normal Cursor agent SDK with explicit authentication, local state, and cloud API capabilities. The scanner’s claimed credential redirection and foreign-package overwrite were not confirmed, and there is no install-time execution.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A host application explicitly calls login or a cloud-agent API.
Impact
A user-approved SDK login may store a Cursor API key in its own SDK directory.
Mechanism
Cursor SDK authentication and cloud-agent requests.
AI rationale
Source inspection shows a normal Cursor agent SDK with explicit authentication, local state, and cloud API capabilities. The scanner’s claimed credential redirection and foreign-package overwrite were not confirmed, and there is no install-time execution.
Evidence
package.jsondist/cjs/auth/login.d.tsdist/cjs/auth/credential-store.d.tsdist/cjs/agent.d.ts~/.cursor/sdk/auth.json
Network endpoints2
api2.cursor.shcursor.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The SDK provides an explicit interactive Cursor login API that can persist a user API key.
- Cloud requests use an API key supplied by the caller, environment, or prior SDK login.
Evidence against
- package.json has no preinstall, install, postinstall, prepare, or bin entry.
- The published entrypoints are SDK modules; inspection found no import-time command execution or foreign package overwrite.
- Credential persistence is documented as part of an explicit login flow and can be disabled with store: null.
- Observed service endpoints are Cursor-owned, not an unofficial credential gateway.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
15 flaggeddist/esm/index.jsView file
1import*as e from"@bufbuild/protobuf";import*as t from"@connectrpc/connect";import*as n from"assert";import*as r from"buffer";import*as s from"crypto";import*as o from"events";impor...
High
1import*as e from"@bufbuild/protobuf";import*as t from"@connectrpc/connect";import*as n from"assert";import*as r from"buffer";import*as s from"crypto";import*as o from"events";impor...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/esm/index.jsView on unpkg · L1dist/bundled/sqlite.jsView file
1// @bun
L2: var jb=Object.create;var{getPrototypeOf:Rb,defineProperty:oD,getOwnPropertyNames:bb}=Object;var Sb=Object.prototype.hasOwnProperty;var $f=($,Z,X)=>{X=$!=null?jb(Rb($)):{};let J=Z||...
L3: ${$.map((Z,X)=>`${X+1}) ${Z.toString()}`).join(`
Findings
1 Critical11 High4 Medium8 Low
CriticalPrevious Version Dangerous Deltadist/bundled/index.js
HighChild Processdist/esm/index.js
HighShelldist/bundled/sqlite.js
HighSame File Env Network Executiondist/esm/index.js
HighCredential Redirect Persistencedist/bundled/index.js
HighEntrypoint Foreign Package Code Overwritedist/bundled/index.js
HighCommand Output Exfiltrationdist/bundled/index.js
HighObfuscated Payload Loaderdist/bundled/index.js
HighRemote Agent Bridgedist/bundled/index.js
HighCross File Remote Execution Contextdist/bundled/index.js
HighTrigger Reachable Command Output Exfiltrationdist/bundled/index.js
Affected versions and remediation
This report applies to @cursor/sdk@1.0.30.
See all versions of @cursor/sdk for other recorded verdicts.
- Review the evidence and your use of @cursor/sdk@1.0.30 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.