@s2code/t3-linux-arm64@0.1.5-nightly.20261101.76
s2code CLI executable for linux-arm64
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package includes runtime telemetry in the bundled Cursor SDK, which is sent to Cursor's own service when SDK operations run. I found no disclosure or opt-out in the inspected path, so this warrants a warning rather than a block; the source does not show unrelated credential exfiltration.
Static reason
One or more suspicious static signals were detected.
Trigger
When SDK operations occur and a Cursor API key is available.
Impact
Cursor receives SDK usage and error details. The reviewed flow does not show credentials being sent to a foreign service.
Mechanism
It queues SDK events and flushes them to `api2.cursor.sh`, including runtime and operation metadata; no consent check or opt-out was evident in the inspected path.
AI rationale
The package includes runtime telemetry in the bundled Cursor SDK, which is sent to Cursor's own service when SDK operations run. I found no disclosure or opt-out in the inspected path, so this warrants a warning rather than a block; the source does not show unrelated credential exfiltration.
Evidence
node_modules/@cursor/sdk/dist/esm/index.js
Network endpoints1
api2.cursor.sh
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest describes a platform-specific s2code CLI package that ships the `t3` executable and client files.
- The bundled Cursor SDK creates a telemetry client targeting `api2.cursor.sh` and attaches SDK version and platform fields to events.
- The SDK queues telemetry events and schedules flushes at a three-second interval.
- The SDK records run creation and completion, executor startup, pull request opening, and operation error details.
- The SDK resolves its key from an explicit argument, `CURSOR_API_KEY`, or its credential store; the inspected telemetry client sends to Cursor's own backend.
Evidence against
- The manifest has no lifecycle scripts, so the inspected telemetry is not triggered by installation.
- The flagged setup commands name the official Claude and ChatGPT install hosts.
- The inspected GitHub release helper attaches a GitHub token only when the request host is `github.com`.
- No source reviewed shows credentials being sent to an unrelated host or an account action performed toward a publisher-selected target.
Behavioral surface
Source & flagged code
16 flaggednode_modules/@cursor/sdk/dist/esm/250.jsView file
1/*! For license information please see 250.js.LICENSE.txt */
L2: export const __webpack_esm_id__=250;export const __webpack_esm_ids__=[250];export const __webpack_esm_modules__={"../../node_modules/.pnpm/exif-parser@0.1.12/node_modules/exif-pars...
Low
Eval
Package source references a known benign dynamic code generation pattern.
node_modules/@cursor/sdk/dist/esm/250.jsView on unpkg · L1client/assets/document.worker-IFIwCk8M.jsView file
7`)}return t},ir=Pn,ar=`~effect/Duration`,or=/*#__PURE__*/ BigInt(0),sr=/*#__PURE__*/ BigInt(1),cr=/*#__PURE__*/ BigInt(2),lr=/*#__PURE__*/ BigInt(10),ur=/*#__PURE__*/ BigInt(1e3),d...
L8: `);n=_o(e)??fo(Va(e.ast),e);break;default:n=so(e)}return t?`${n}\n at ${t}`:n}function _o(e){if(e._tag===`Pointer`)return;if(e._tag===`Encoding`)return _o(e.issue);let t=(e._tag==...
L9: //# sourceMappingURL=document.worker-IFIwCk8M.js.map
Medium
Dynamic Require
Package source references dynamic require/import behavior.
client/assets/document.worker-IFIwCk8M.jsFindings
8 High8 Medium5 Low
HighSame File Env Network Executionnode_modules/@cursor/sdk/dist/esm/748.js
HighCommand Output Exfiltrationnode_modules/@cursor/sdk/dist/esm/748.js
HighSandbox Evasion Gated Capabilitynode_modules/@cursor/sdk/dist/esm/index.js
HighObfuscated Payload Loadernode_modules/playwright-core/lib/coreBundle.js
HighExternal Ai Agent Control Surface Mutationnode_modules/playwright-core/lib/coreBundle.js
HighCross File Remote Execution Contextnode_modules/@cursor/sdk/dist/bundled/index.js
HighShips High Entropy Blobclient/assets/FoxitSerifItalic-CQs5lx9Y.pfb
HighSemantic Analysis Limitedclient/assets/77XECAW3-hDgiCC0L.js#virtual:normalized:round1
MediumDynamic Requireclient/assets/document.worker-IFIwCk8M.js
Affected versions and remediation
This report applies to @s2code/t3-linux-arm64@0.1.5-nightly.20261101.76.
See all versions of @s2code/t3-linux-arm64 for other recorded verdicts.
- Review the evidence and your use of @s2code/t3-linux-arm64@0.1.5-nightly.20261101.76 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.