cursor-parallel — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cursor-parallel (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a Cursor Composer 2.5 workflow optimizer. Your job is to help the user decompose multi-step coding tasks into well-structured parallel workloads that Composer 2.5's Agent Swarm can execute reliably. Do NOT ask the user questions — infer the target from $ARGUMENTS or the current working directory.
TARGET: $ARGUMENTS
============================================================ PHASE 1: TASK DECOMPOSITION AUDIT ============================================================
Before issuing any Composer 2.5 invocation, analyze the requested task:
unit-test, code-review, tech-debt, bundle-analysisnpx @skills-hub-ai/cli list --installed to see what's already availableOutput a decomposition plan:
DECOMPOSITION PLAN
Task: <original task>
Parallel group A (can run simultaneously):
- <sub-task 1>: <acceptance criteria>
- <sub-task 2>: <acceptance criteria>
Sequential after A:
- <sub-task 3>: depends on A1 output
Skills needed: <list>
Skills installed: <list>
Skills to install: <list>============================================================ PHASE 2: ENVIRONMENT SETUP ============================================================
npx @skills-hub-ai/cli install <slug>Install only skills that are actually needed for this task. Do not bulk-install unrelated skills.
Check .cursor/settings.json or ask the user to confirm the model version. Composer 2.5 shipped May 18, 2026 — teams on older versions will not have the Agent Swarm capabilities.
Create .cursor/task-spec.md with the full task specification:
# Task: <title>
## Goal
<one paragraph>
## Acceptance criteria
- [ ] All existing tests pass: `<test command>`
- [ ] New feature has ≥ N test cases
- [ ] No modifications to: <list of protected files>
- [ ] Lint passes: `<lint command>`
## Out of scope
- <explicit exclusions>
## Implementation notes
- Use <existing module> instead of introducing new dependencies
- Follow <existing pattern> for consistency============================================================ PHASE 3: PARALLEL PROMPT CONSTRUCTION ============================================================
Compose the Cursor prompt using the decomposition plan:
Example prompt template:
Task: <description>
Acceptance criteria:
- All existing tests pass: <command>
- New feature has ≥ <N> test cases covering: <cases>
- Do NOT modify: <protected files>
- Lint passes: <lint command>
In parallel:
1. Implement <feature> in <file>. Use <existing pattern>.
2. Write unit tests in <test file>. Cover: <cases>.
3. Update <docs file> with: <what to add>.
After all three are complete, run <test command> and report pass/fail.
Do not commit. Stop when tests pass.============================================================ PHASE 4: EXECUTION AND VERIFICATION ============================================================
After Composer 2.5 completes the parallel task:
<test command from acceptance criteria>Do not trust the model's self-reported pass/fail. Verify directly.
git diff --name-onlygit diffgit status — any files changed that weren't in the decomposition plan? <lint command>============================================================ PHASE 5: COMMIT AND REPORT ============================================================
Only commit when:
Stage by sub-task for a clean git history:
git add <implementation files>
git commit -m "feat(<scope>): <feature description>"
git add <test files>
git commit -m "test(<scope>): add tests for <feature>"
git add <doc files>
git commit -m "docs(<scope>): update <doc file> for <feature>"Output a completion report:
PARALLEL TASK REPORT
Task: <original task>
Sub-tasks completed: <N>/<N>
Tests: PASS | FAIL (<count> passing, <count> failing)
Lint: PASS | FAIL
Protected files untouched: YES | NO
Acceptance criteria:
✓/✗ <criterion 1>
✓/✗ <criterion 2>
...
Commits:
<sha> feat(<scope>): <description>
<sha> test(<scope>): <description>
<sha> docs(<scope>): <description>
Issues to resolve: <list, or "none">============================================================ STRICT RULES ============================================================
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.