Directory
Skills and plugins
Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.
Grades are a hygiene check, not a security guarantee.
This grade is a hygiene screen, not proof of safety.
Showing 1 to 14 of 14 Cursor, Grade D entries. Page 1 of 1.
Listed A to Z by name.
No entries match that filter.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_DELETE_FILES NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST +1 more
scripts/_common.py:382 subprocess.check_call(contentforge (Plugin)
Compatibility: Portable across standard formats.
An open-source editorial production system that researches, verifies, drafts, and delivers publication-ready long-form content with human review and provenance built in.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_LIFECYCLE_HOOK NETWORK_NO_FIXED_HOST SECRETS_PATH_CREDENTIAL +1 more
package.json:45 preparestackglass (Plugin)
Compatibility: Not stated.
Stackglass is the observability and verification layer for AI-assisted development.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
PERMISSION_SHELL_UNDECLARED NETWORK_NO_FIXED_HOST OBFUSCATION_MINIFIED_PAYLOAD
skills/sr-search/src/stockroom/doctor.py:60 return subprocess.run(stockroom (Plugin)
Compatibility: Not stated.
A local, faithful, searchable warehouse of your agentic-coding history.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
mcp/src/createServer.js:74 "curl -fsSL https://wavedash.com/cli/install.sh | sh",ai (Plugin)
Compatibility: Not stated.
Official Wavedash plugins and agent skills for AI coding tools.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
cursor/block-curl-pipe-sh/scripts/block-curl-pipe-sh.sh:6 # The threat: `curl https://x | sh` (and its kin) ruChock Cursor Plugins (Plugin)
Compatibility: Not stated.
Chock policies as installable Cursor plugins , guard policies ship a real beforeShellExecution deny hook (witnessed blocking).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/corebee-knowledge-base/SKILL.md:26 ater with `list_knowledge_sources`, and do not tell the user a pageCorebee Plugin (Plugin)
Compatibility: Not stated.
Work your Corebee support inbox: triage and answer web chat, WhatsApp, email and SMS conversations, look up customers and update the knowledge base.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
docs/upstream/README.md:343 curl -fsSL https://raw.githubusercontent.com/AgriciDaniel/claude-seo/main/uninstalCursor Seo (Plugin)
Compatibility: Not stated.
SEO toolkit for Cursor , technical SEO, E-E-A-T, Schema.org, GEO/AI search, local SEO, keyword clustering, drift monitoring & DataForSEO.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/license-and-reconnect/SKILL.md:54 4. Do not tell the user GA4 is broken because Ads is locked.Dgtl Connector (Plugin)
Compatibility: Not stated.
Local GA4, Search Console, and Tag Manager (read and manage).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
scripts/agent-readiness-audit.py:829 def fetch(url: str, timeout: int = 15) -> tuple[int | None, str, str | NoDigital Marketing Pro (Plugin)
Compatibility: Portable across standard formats.
An open-source AI based digital marketing operating system for strategy, SEO, AEO/GEO, paid media, content, CRM, and analytics - grounded in brand context, human approval, and verifiable outputs.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/forge-autopilot/SKILL.md:219 the catalog you hold is incomplete. Do not tell the user no workflow existForge Plugin Cursor (Plugin)
Compatibility: Not stated.
Free, AI-powered PDLC automation for Cursor.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/mobile-e2e-testing/SKILL.md:44 curl -Ls "https://get.maestro.mobile.dev" | bashMobile App Developer Tools (Plugin)
Compatibility: Not stated.
Cursor plugin for mobile app development.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
commands/st-init.md:107 curl https://get.pharo.org | bashSmalltalk Dev Plugin Cursor (Plugin)
Compatibility: Not stated.
Cursor plugin for AI-driven Smalltalk (Pharo) development
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
plugins/agent-code-navigator/scripts/install.sh:57 curl -fsSL https://raw.githubusercontent.com/777genius/univUniversal Plugins For Ai Agents (Plugin)
Compatibility: Not stated.
Portable MCP plugin marketplace for Claude Code, Codex, Gemini, OpenCode, and Cursor.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:7 # curl -fsSL https://raw.githubusercontent.com/adityaarsharma/sitewalk/main/install.sh | bashsitewalk (Plugin)
Compatibility: Not stated.
<!-- mcp-name: io.github.adityaarsharma/librecrawl-technical-seo-audit-mcp -->
This grade is a hygiene screen, not proof of safety.
