@icodecraft/no-peek
Advanced tools
One command to lock Cursor Agent Read to this project — .cursorignore + sandboxed shell
Locks Cursor Agent Read to this project — one command.
npx @icodecraft/no-peek
Installs:
| File | Role |
|---|---|
.cursorignore | Blocks Agent Read / Tab / @ outside this folder (and common secrets) |
.cursor/sandbox.json | Sandboxed shell: network deny-by-default, FS scoped to the workspace |
npx @icodecraft/no-peek --force # refresh after moving the repo
npx @icodecraft/no-peek --with-skill # optional soft policy skill
npx @icodecraft/no-peek help
After install: reload Cursor, keep External File Protection on, and run agents with sandbox enabled (Settings → Agents → Approvals & Execution).
.cursorignore uses gitignore-style globs. no-peek walks from $HOME down to this folder so siblings, Desktop, and ~/.ssh stay out of Agent Read:
$HOME/*
!$HOME/Desktop/
$HOME/Desktop/*
!$HOME/Desktop/your-project/
!$HOME/Desktop/your-project/**
Works on macOS, Linux, and Windows.
anti-slop — less AI-slop in PRs:
npx skills add iCodeCraft/anti-slop
MIT
FAQs
One command to lock Cursor Agent Read to this project — .cursorignore + sandboxed shell
The npm package @icodecraft/no-peek receives a total of 0 weekly downloads. As such, @icodecraft/no-peek popularity was classified as not popular.
We found that @icodecraft/no-peek demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.