菜单
Audits IDE tooling supply chain: Cursor/VS Code extensions, Cursor plugins, and bundled node_modules using pnpm/npm audit where lockfiles exist. Use when the user asks about Cursor plugins, extensions, MCP helpers, IDE malware, or whether editor dependencies were compromised.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | audit-ide-dependencies |
| description | Audits IDE tooling supply chain: Cursor/VS Code extensions, Cursor plugins, and bundled node_modules using pnpm/npm audit where lockfiles exist. Use when the user asks about Cursor plugins, extensions, MCP helpers, IDE malware, or whether editor dependencies were compromised. |
Workflow to find Node/npm dependency trees shipped with or used by the editor (Cursor first; VS Code–compatible paths included). Most Cursor plugins in plugins/cache are skills/rules only; extensions and some cached plugin monorepos ship real node_modules and lockfiles — pnpm audit / npm audit apply there.
Pair with fix-dependency-security (CVE fixes, SFW installs), audit-allow-builds (postinstall allowlists when you install inside a plugin tree), and upgrade-packages (bumping plugin/extension deps).
| Signal | pnpm audit / npm audit | Does not catch |
|---|---|---|
| Known CVEs in locked versions | Yes | Fresh malware with no advisory yet |
| Transitive paths in lockfile | Yes | One-off malicious postinstall (use npm view … scripts + audit-allow-builds) |
| Markdown-only plugins (skills, rules) | N/A — no lockfile | — |
IDE trees are not the project repo. Audits run in ~/.cursor/… (or $CURSOR_HOME). Hardening in the repo’s pnpm-workspace.yaml does not apply there unless you install inside that tree.
- [ ] 1. Set CURSOR_HOME (default ~/.cursor)
- [ ] 2. Discover audit targets (lockfiles + bundled node_modules)
- [ ] 3. Run pnpm audit or npm audit per target (exclude fixtures)
- [ ] 4. Triage: runtime extension vs dev-only plugin monorepo
- [ ] 5. Optional: npm view scripts on flagged packages; incident intel
- [ ] 6. Report + recommend disable/update/extension pin
- [ ] 7. Re-audit project repo separately (devprofile root)
| Surface | Typical path | npm tree? |
|---|---|---|
| Extensions | $CURSOR_HOME/extensions/<publisher.name-version>/ | Often node_modules/; some have package-lock.json |
| Plugin cache | $CURSOR_HOME/plugins/cache/<publisher>/<name>/<hash>/ | Varies: skills-only (no lockfile) vs full monorepo + pnpm-lock.yaml |
| Plugin local | $CURSOR_HOME/plugins/local/ | User-installed plugins |
| Project MCP descriptors | $CURSOR_HOME/projects/<id>/mcps/ | Usually JSON tool schemas, not install roots |
| Repo agent skills | <repo>/.agents/skills/ | No npm deps — skip |
VS Code / VSCodium: same layout under ~/.vscode/extensions or ~/.config/Code/User/… if the user names another IDE.
export CURSOR_HOME="${CURSOR_HOME:-$HOME/.cursor}"
Lockfiles (plugin/extension install roots — skip test fixtures and templates):
find "$CURSOR_HOME/plugins/cache" "$CURSOR_HOME/extensions" \
\( -name pnpm-lock.yaml -o -name package-lock.json -o -name npm-shrinkwrap.json \) \
2>/dev/null | rg -v '/test/|/tests/|/fixtures/|/templates/'
Bundled node_modules without a root lockfile (audit via nearest lockfile or note manual review):
find "$CURSOR_HOME/extensions" -maxdepth 2 -type d -name node_modules 2>/dev/null
Plugins with no lockfile (e.g. svelte, linear, runlayer — only skills/ / rules/): no audit run; list as “non-npm surface”.
For each discovered lockfile directory DIR:
cd "$DIR"
| Lockfile | Command |
|---|---|
pnpm-lock.yaml | pnpm audit (use pnpm install --frozen-lockfile first only if audit errors on missing modules) |
package-lock.json | npm audit |
Prefer read-only audit; do not pnpm install / npm ci in plugin caches unless the user wants deps installed. Large plugin monorepos (e.g. cached shadcn UI repo) may report many advisories in dev/test subtrees that never run inside the IDE — triage in Step 4.
Project repo (separate): from the user’s workspace root, run the same commands as fix-dependency-security (pnpm audit, sfw pnpm install).
| Context | Action |
|---|---|
| Extension you rely on (Kilo, Python, Remote SSH) | Treat CVEs as user-facing; update extension in Cursor, or disable until patched |
| Plugin cache monorepo (tooling upstream clone) | Prefer “informational” unless you run pnpm install in that cache; consider clearing cache to refresh |
| Critical / high on runtime path | pnpm why <pkg> inside that DIR; check extension package.json dependencies |
| No fix in audit | Check StepSecurity / Socket blog for incident; do not assume clean |
Extensions without a lockfile: record extension id + version from package.json; security = publisher trust + update channel, not audit.
When audit is clean but an IDE package was in the news, or has install scripts:
npm view <package>@<version> scripts version --json
Install or refresh plugin deps only with SFW:
sfw pnpm install # inside plugin dir with pnpm-lock.yaml
sfw npm ci # inside extension dir with package-lock.json
Re-run audit-allow-builds if you maintain allowBuilds in a plugin’s pnpm-workspace.yaml.
| Target | Path | Tool | CVEs (H/M/L) | Runtime risk | Action |
|---|---|---|---|---|---|
e.g. rust-analyzer | extensions/… | npm audit | … | Extension runtime | Update extension |
e.g. shadcn cache | plugins/cache/… | pnpm audit | … | Low (cache only) | Ignore / prune cache |
svelte plugin | skills only | — | — | N/A | None |
Also state project repo audit result if run in the same session.
plugins/cache/.../<hash>/ dir after disabling the plugin.node_modules into project repos.pnpm audit covers Cursor extensionspnpm install in every plugin cache “to fix” audit noise without user approvaltest/fixtures/** lockfiles inside plugin monorepos as if they were IDE runtimeprojects/*/mcps/ as npm packagesnode_modules but no lockfile (no audit possible — use publisher/version review)pnpm-workspace.yaml policyFission engine for token-efficient coding (JS, TS, Node.js, Rust, Python, ML/AI). Pruning, compression, strict token budgeting. Pair with fusion-sage for synthesis and surplus. Trigger on implementation, debugging, refactoring; hand off architecture to fusion-sage.
Guides modern HTML semantics, WAI-ARIA, WCAG contrast, data-* state attributes, and native elements over div-heavy UI; pairs Tailwind with modern CSS where CSS wins. Use before marketing/UI refactors, landing pages, forms, dialogs, nav, or when the user mentions semantics, WAI-ARIA, accessibility, data attributes, native elements, color contrast, or modern CSS.
Fusion-oriented evolution of Context Sage. Uses the original fission engine as containment field, then adds synthesis, surplus generation, and self-amplifying knowledge loops. For AI coding tasks where you want not just efficiency, but compounding intelligence.
Create a new project SKILL.md for a repeatable workflow. Use when user asks to add a skill for vulnerabilities, package upgrades, audits, supply-chain checks, or any named agent workflow.
Delegate broad exploration to a subagent with a fixed Return format. Use when the task needs readonly repo mapping, token/CSS/prosody surveys, QA module exploration, or "explore thoroughly" with numbered deliverables.
Harden pnpm workspace and fix vulnerabilities. Use when user asks for pnpm audit, deprecations, supply-chain security, workspace hardening, or sfw/firewall checks.