update-cursor-settings — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited update-cursor-settings (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill guides you through modifying Cursor/VSCode user settings. Use this when the user wants to change editor settings, preferences, configuration, themes, keybindings, or any settings.json values.
Before modifying ANY settings, verify:
cat ~/.config/Cursor/User/settings.json 2>/dev/null | head -50 # Linux
cat ~/Library/Application\ Support/Cursor/User/settings.json 2>/dev/null | head -50 # macOScat .vscode/settings.json 2>/dev/nullWhy: Preserve existing settings. Only modify what's requested.
| OS | Path |
|---|---|
| macOS | ~/Library/Application Support/Cursor/User/settings.json |
| Linux | ~/.config/Cursor/User/settings.json |
| Windows | %APPDATA%\Cursor\User\settings.json |
// Read the settings file first
const settingsPath = "~/Library/Application Support/Cursor/User/settings.json";
// Use the Read tool to get current contentsCommon setting categories:
editor.fontSize, editor.tabSize, editor.wordWrap, editor.formatOnSaveworkbench.colorTheme, workbench.iconTheme, workbench.sideBar.locationfiles.autoSave, files.exclude, files.associationsterminal.integrated.fontSize, terminal.integrated.shell.*cursor. or aipopup.When modifying settings.json:
If user says "make the font bigger":
{
"editor.fontSize": 16
}If user says "format my code when I save":
{
"editor.formatOnSave": true
}If user says "use dark theme" or "change my theme":
{
"workbench.colorTheme": "Default Dark Modern"
}// and /* */). When reading, be aware comments may exist. When writing, preserve comments if possible..vscode/settings.json): Apply only to the current project| User Request | Setting |
|---|---|
| "bigger/smaller font" | editor.fontSize |
| "change tab size" | editor.tabSize |
| "format on save" | editor.formatOnSave |
| "word wrap" | editor.wordWrap |
| "change theme" | workbench.colorTheme |
| "hide minimap" | editor.minimap.enabled |
| "auto save" | files.autoSave |
| "line numbers" | editor.lineNumbers |
| "bracket matching" | editor.bracketPairColorization.enabled |
| "cursor style" | editor.cursorStyle |
| "smooth scrolling" | editor.smoothScrolling |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.