
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
claude-cursor-agent-skill
Advanced tools
A Claude Code skill that invokes Cursor's coding agent for code review and TDD-based implementation
A Claude Code skill that lets you invoke Cursor's coding agent via natural language for code review and TDD-based implementation.
npm install -g claude-cursor-agent-skill
npx skills add ivanon/claude-cursor-skill -y -g
Get a key from the Cursor integrations dashboard.
Option A: Environment variable
export CURSOR_API_KEY="crsr_..."
Option B: Config file
mkdir -p ~/.cursor-skill
echo '{"cursorApiKey":"crsr_..."}' > ~/.cursor-skill/settings.json
Default is composer-2. Override via:
export CURSOR_MODEL="composer-3"
Or add defaultModel to ~/.cursor-skill/settings.json.
# Review a file
cursor-agent review src/auth.ts
cursor-agent review docs/api.md --output review.md
# Plan-based review
cursor-agent review --plan docs/design.md
# Implement a feature (TDD)
cursor-agent implement "add JWT auth" --output src/auth.ts
# Verbose output
cursor-agent review src/auth.ts --verbose
Once the skill is registered, explicitly mention "cursor" to trigger it:
使用cursor帮我review一下这个文档
让cursor评审一下 src/auth.ts
让cursor实现一个JWT中间件,输出到 src/middleware/jwt.ts
用cursor检查一下这段代码
If you don't mention "cursor", Claude will handle the request itself without invoking this skill.
npm install
npm run dev # Run with tsx
npm run build # Compile TypeScript
echo "npm test"
src/
├── index.ts # Entry: intent parsing and orchestration
├── cursor.ts # Cursor SDK wrapper (streaming, timeout, retry)
├── config.ts # API key and model resolution
├── prompts.ts # Prompt templates for review and implement
└── output.ts # Result formatting and file I/O
bin/
└── cursor-agent.js # CLI entry point
SKILL.md # Claude Code skill definition
MIT
FAQs
A Claude Code skill that invokes Cursor's coding agent for code review and TDD-based implementation
The npm package claude-cursor-agent-skill receives a total of 0 weekly downloads. As such, claude-cursor-agent-skill popularity was classified as not popular.
We found that claude-cursor-agent-skill demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.