registry / @cursor/sdk / 1.0.31
@cursor/sdk@1.0.31
TypeScript SDK for Cursor agents.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a bundled Cursor agent SDK with expected Node, local-agent, authentication, and Statsig dependency code. Source inspection found no automatic installation hook or concrete malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A consumer explicitly creates or uses an SDK agent.
Impact
No unconsented install-time action or exfiltration was confirmed.
Mechanism
User-invoked local and cloud agent SDK operations.
AI rationale
This is a bundled Cursor agent SDK with expected Node, local-agent, authentication, and Statsig dependency code. Source inspection found no automatic installation hook or concrete malicious behavior.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The ESM entrypoint imports Node process APIs, consistent with a local agent SDK runtime.
- The bundled entrypoint contains Statsig configuration endpoints, explaining the flagged third-party hosts.
- The SQLite bundle contains a normal protobuf import for its bundled API support.
- The manifest has no install, preinstall, or postinstall hook; its only lifecycle hook is prepublishOnly.
Evidence against
- No source evidence shows credential redirection, secret exfiltration, hidden payload execution, or unauthorized persistence.
- Agent and filesystem capabilities are exposed as SDK functionality and require an application to invoke them.
- The API-key text rejects an empty key and directs callers to provide a Cursor key or log in.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinified
Source & flagged code
14 flaggeddist/esm/index.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @cursor/sdk@1.0.30
matchedIdentity = npm:QGN1cnNvci9zZGs:1.0.30
similarity = 0.896
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/esm/index.jsView on unpkg1import{fileURLToPath as e}from"node:url";var t=e(import.meta.url);import*as n from"@bufbuild/protobuf";import*as r from"@connectrpc/connect";import*as s from"assert";import*as o fr...
High
1import{fileURLToPath as e}from"node:url";var t=e(import.meta.url);import*as n from"@bufbuild/protobuf";import*as r from"@connectrpc/connect";import*as s from"assert";import*as o fr...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
1 Critical10 High4 Medium8 Low
CriticalPrevious Version Dangerous Deltadist/esm/index.js
HighChild Processdist/esm/index.js
HighShelldist/bundled/sqlite.js
HighSame File Env Network Executiondist/esm/index.js
HighCredential Redirect Persistencedist/bundled/index.js
HighCommand Output Exfiltrationdist/bundled/index.js
HighObfuscated Payload Loaderdist/bundled/index.js
HighRemote Agent Bridgedist/bundled/index.js
HighCross File Remote Execution Contextdist/bundled/index.js
HighTrigger Reachable Command Output Exfiltrationdist/bundled/index.js
HighSemantic Analysis Limiteddist/bundled/index.js
Affected versions and remediation
This report applies to @cursor/sdk@1.0.31.
See all versions of @cursor/sdk for other recorded verdicts.
- Review the evidence and your use of @cursor/sdk@1.0.31 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.