registry / cursor-browser-cli / 1.2.2

cursor-browser-cli@1.2.2

CLI + MCP to drive Cursor IDE's built-in Browser Tab from Grok Build, Claude Code, Codex, or shell

AI Security Review

scanned 3d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation mutates several AI-agent skill roots and registers an MCP server with Grok. The installed MCP can automate Cursor’s browser tab through localhost.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm postinstall

Impact

Unconsented installation expands AI-agent control surfaces and browser-automation capability.

Mechanism

automatic multi-agent skill deployment and MCP registration

Policy narrative

On npm installation, setup creates skill directories under multiple unrelated agent products, copies its skill file, and, if present, removes and adds a Grok MCP configuration that launches package code. This occurs without an explicit user setup command. The resulting server provides browser automation via a local Cursor extension.

Rationale

The package’s postinstall mutates broad, foreign AI-agent control surfaces and registers an MCP integration without consent. Localhost-only networking does not mitigate this install-time control-surface change.

Evidence

package.jsonscripts/setup.jsskill/SKILL.mdmcp/server.mjsextension/extension.js

Network endpoints1

127.0.0.1

cursor-browser-cli@1.2.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code