registry / cursor-browser-cli / 1.0.0

cursor-browser-cli@1.0.0

CLI + MCP to drive Cursor IDE's built-in Browser Tab from Grok Build, Claude Code, Codex, or shell

AI Security Review

scanned 10d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall mutates multiple foreign AI-agent skill/config surfaces without an explicit user command. It also installs a Cursor extension that starts a localhost browser-control API.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall

Impact

Can alter Grok, Claude, and generic agent behavior and register a browser-control MCP server.

Mechanism

automatic agent skill/MCP registration and extension deployment

Policy narrative

Installing the package triggers setup.js automatically. It replaces Cursor extension directories, copies its agent instruction file into Grok, Claude, and generic agent skill locations, and when Grok exists removes then re-adds an MCP server pointing to the package. The installed extension activates at startup and provides localhost browser automation, including page JavaScript evaluation.

Rationale

This is a concrete, unconsented postinstall mutation of foreign/broad AI-agent control surfaces. Localhost-only networking does not mitigate the install-time agent configuration changes.

Evidence

package.jsonscripts/setup.jsextension/extension.jsmcp/server.mjsskill/SKILL.md~/.cursor/extensions/local.cursor-browser-cli-1.0.0~/.grok/skills/cursor-browser/SKILL.md~/.claude/skills/cursor-browser/SKILL.md~/.agents/skills/cursor-browser/SKILL.md

Network endpoints

cursor-browser-cli@1.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code