Skip to content

Grades are a hygiene check, not a security guarantee.

Directory

Skills and plugins

Search the directory and filter by grade or ecosystem. Live entries are A, B, C and D. No F grades are published yet. 15739 entries are listed. Only entries the scanner has graded are listed.

Grades are a hygiene check, not a security guarantee.

This grade is a hygiene screen, not proof of safety.

Showing 301 to 322 of 322 Cursor entries. Page 7 of 7.

Sort by

Listed A to Z by name.

Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
src/backend/actions.ts:325 const response = await fetch(url, init)
AirSQLite (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Not stated.
a cheap (free) imitation of Airtable's data layer for SQLite databases in VSCode + Cursor
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
cursor/block-curl-pipe-sh/scripts/block-curl-pipe-sh.sh:6 # The threat: `curl https://x | sh` (and its kin) ru
Chock Cursor Plugins (Plugin)
Cursor, Plugin
Date graded: 20 Oct 2026
Compatibility: Not stated.
Chock policies as installable Cursor plugins , guard policies ship a real beforeShellExecution deny hook (witnessed blocking).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/corebee-knowledge-base/SKILL.md:26 ater with `list_knowledge_sources`, and do not tell the user a page
Corebee Plugin (Plugin)
Cursor, Plugin
Date graded: 19 Oct 2026
Compatibility: Not stated.
Work your Corebee support inbox: triage and answer web chat, WhatsApp, email and SMS conversations, look up customers and update the knowledge base.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
docs/upstream/README.md:343 curl -fsSL https://raw.githubusercontent.com/AgriciDaniel/claude-seo/main/uninstal
Cursor Seo (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Not stated.
SEO toolkit for Cursor , technical SEO, E-E-A-T, Schema.org, GEO/AI search, local SEO, keyword clustering, drift monitoring & DataForSEO.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/license-and-reconnect/SKILL.md:54 4. Do not tell the user GA4 is broken because Ads is locked.
Dgtl Connector (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Not stated.
Local GA4, Search Console, and Tag Manager (read and manage).
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
NETWORK_HOST_FROM_INPUT
scripts/agent-readiness-audit.py:829 def fetch(url: str, timeout: int = 15) -> tuple[int | None, str, str | No
Digital Marketing Pro (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Portable across standard formats.
An open-source AI based digital marketing operating system for strategy, SEO, AEO/GEO, paid media, content, CRM, and analytics - grounded in brand context, human approval, and verifiable outputs.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
AGENT_HIDDEN_STEP
skills/forge-autopilot/SKILL.md:219 the catalog you hold is incomplete. Do not tell the user no workflow exist
Forge Plugin Cursor (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Not stated.
Free, AI-powered PDLC automation for Cursor.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
install.sh:16 # curl -fsSL https://raw.githubusercontent.com/borenstejn/formloop/main/install.sh | bash
formloop (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Not stated.
Generate rich UI forms on-the-fly from LLM agents.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
skills/native-install/SKILL.md:19 curl -sSL https://get.mobazha.org/install | bash
Mobazha Skills (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Not stated.
AI skills for Mobazha decentralized commerce: store deployment, product import, privacy tools
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
skills/mobile-e2e-testing/SKILL.md:44 curl -Ls "https://get.maestro.mobile.dev" | bash
Mobile App Developer Tools (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Not stated.
Cursor plugin for mobile app development.
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
README.md:89 curl -fsSL https://sthenosec.com/download/plugins/install.sh | bash -s -- --agent cursor
Reachable Agent Plugin Installer (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Not stated.
Claude Code marketplace for the REACHABLE plugin (generated from the signed adapter).
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
NETWORK_HOST_FROM_INPUT
skill-packager-workspace/iteration-1/eval-1-universal-repo/without_skill/outputs/proof-engine-skill/skill/scri
Skill Packager Skill (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Not stated.
Package AI agent skills into deployment formats , .zip, .skill, Claude plugin, Claude marketplace, Cursor plugin, Cursor marketplace, native Codex/ChatGPT plugin, ChatGPT/Manus zip, Codex CLI, NanoClaw marketplace, OpenClaw/ClawHub, Agent Skills standard (.agents/), or a univers
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
commands/st-init.md:107 curl https://get.pharo.org | bash
Smalltalk Dev Plugin Cursor (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Not stated.
Cursor plugin for AI-driven Smalltalk (Pharo) development
This grade is a hygiene screen, not proof of safety.
Grade C, One medium finding, Hexagon
INSTALL_REMOTE_SCRIPT
examples/workflows/soliton-review-tiered.yml:51 curl -sSfL https://raw.githubusercontent.com/gitleaks/gitleaks
soliton (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Not stated.
Risk-adaptive multi-agent PR review for Claude Code & Cursor , 7 specialized agents catch bugs, security flaws, and AI hallucinations in parallel
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
plugins/agent-code-navigator/scripts/install.sh:57 curl -fsSL https://raw.githubusercontent.com/777genius/univ
Universal Plugins For Ai Agents (Plugin)
Cursor, Plugin
Date graded: 16 Oct 2026
Compatibility: Not stated.
Portable MCP plugin marketplace for Claude Code, Codex, Gemini, OpenCode, and Cursor.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
Jt Harness Plugin (Plugin)
Cursor, Plugin
Date graded: 22 Oct 2026
Compatibility: Not stated.
JurisLM's engineering delivery rules for Cursor.
This grade is a hygiene screen, not proof of safety.
Grade A, No issues found, Square
mcp (Plugin)
Cursor, Plugin
Date graded: 22 Oct 2026
Compatibility: Not stated.
Hire from Claude: search 210,000+ vetted startup candidates, review Clera's picks, and request intros through the Clera MCP.
This grade is a hygiene screen, not proof of safety.
Grade A, No issues found, Square
Medal Social Plugin (Plugin)
Cursor, Plugin
Date graded: 22 Oct 2026
Compatibility: Not stated.
Create branded editable emails, preview them in supported chats, import private image references and read campaign results.
This grade is a hygiene screen, not proof of safety.
Grade D, Two or more medium findings, or a high, Triangle
INSTALL_REMOTE_SCRIPT
install.sh:7 # curl -fsSL https://raw.githubusercontent.com/adityaarsharma/sitewalk/main/install.sh | bash
sitewalk (Plugin)
Cursor, Plugin
Date graded: 22 Oct 2026
Compatibility: Not stated.

This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
skills (Plugin)
Cursor, Plugin
Date graded: 22 Oct 2026
Compatibility: Not stated.
Jam's MCP is the fast lane between Jam recordings and your dev tools.
This grade is a hygiene screen, not proof of safety.
Grade B, Minor notes only, Circle
marketplace (Plugin)
Cursor, Plugin
Date graded: 27 Oct 2026
Compatibility: Not stated.
Agent skills built by the community on the daily.dev API and approved on the [daily.dev plugin marketplace](https://daily.dev/marketplace).
This grade is a hygiene screen, not proof of safety.
Grade A, No issues found, Square
Scripe Agent (Plugin)
Cursor, Plugin
Date graded: 27 Oct 2026
Compatibility: Not stated.
Plan, write, schedule and measure your team's LinkedIn posts in Scripe from your AI agent: content calendars for every profile and company page, posts in each person's voice, scheduling and LinkedIn analytics, through the hosted Scripe MCP server (OAuth, no install).
This grade is a hygiene screen, not proof of safety.