Onesignal Cursor Plugin — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Onesignal Cursor Plugin (MCP Server) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
OneSignal workflows for Cursor. This plugin packages:
This plugin uses OAuth through the hosted OneSignal MCP server.
The plugin MCP config points Cursor at the OneSignal OAuth MCP endpoint:
https://api.onesignal.com/mcp/oauthWhen Cursor starts the MCP connection, follow the OAuth prompt to connect your OneSignal account. Do not paste OAuth tokens, API keys, or other secrets into chat or source files.
Symlink this repo into Cursor's local plugin folder:
mkdir -p ~/.cursor/plugins/local
ln -s /path/to/onesignal-cursor-plugin ~/.cursor/plugins/local/onesignalThen restart Cursor or run Developer: Reload Window.
Verify:
onesignal_health, onesignal_config, or onesignal_reference_overview work.onesignal-setupsetup-onesignalsend-onesignal-test-notificationdebug-onesignal-deliveryThe plugin includes an always-on OneSignal safety rule:
Cursor may also show MCP tool approval prompts. Do not bypass them.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.