registry / @cursor/sdk / 1.0.34
@cursor/sdk@1.0.34
TypeScript SDK for Cursor agents.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe manifest does not show an automatic install lifecycle hook, and the required agent-related locations contain scoped authentication storage validation or path parsing. No concrete malicious behavior was found in the inspected source.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
No automatic install-time trigger was identified.
Impact
No confirmed malicious impact was established.
Mechanism
The inspected paths provide SDK authentication-record handling and project-path parsing, not an attack mechanism.
AI rationale
The manifest does not show an automatic install lifecycle hook, and the required agent-related locations contain scoped authentication storage validation or path parsing. No concrete malicious behavior was found in the inspected source.
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package manifest lists development and publishing scripts, with no install lifecycle hook shown.
- The bundled entry validates a structured SDK authentication record at a package-owned Cursor SDK path.
- The CommonJS agent-location code only parses a Cursor project path and returns derived path components.
- The CommonJS entry validates the authentication record before using it.
- The ESM agent-location code likewise only parses and sanitizes path components.
- The ESM entry likewise validates the SDK authentication record.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
15 flaggeddist/esm/index.jsView file
1import*as t from"@bufbuild/protobuf";import*as r from"@connectrpc/connect";import*as e from"assert";import*as n from"buffer";import*as s from"crypto";import*as o from"events";impor...
High
1import*as t from"@bufbuild/protobuf";import*as r from"@connectrpc/connect";import*as e from"assert";import*as n from"buffer";import*as s from"crypto";import*as o from"events";impor...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/esm/index.jsView on unpkg · L11import*as t from"@bufbuild/protobuf";import*as r from"@connectrpc/connect";import*as e from"assert";import*as n from"buffer";import*as s from"crypto";import*as o from"events";impor...
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/esm/index.jsView on unpkg · L1Findings
1 Critical10 High5 Medium8 Low
CriticalPrevious Version Dangerous Deltadist/bundled/index.js
HighChild Processdist/esm/index.js
HighSame File Env Network Executiondist/esm/index.js
HighCredential Redirect Persistencedist/cjs/index.js
HighCommand Output Exfiltrationdist/esm/index.js
HighSandbox Evasion Gated Capabilitydist/esm/index.js
HighObfuscated Payload Loaderdist/bundled/index.js
HighRemote Agent Bridgedist/bundled/index.js
HighCross File Remote Execution Contextdist/bundled/index.js
HighTrigger Reachable Command Output Exfiltrationdist/cjs/index.js
HighSemantic Analysis Limiteddist/bundled/index.js
Affected versions and remediation
This report applies to @cursor/sdk@1.0.34.
See all versions of @cursor/sdk for other recorded verdicts.
- Review the evidence and your use of @cursor/sdk@1.0.34 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.