Install
$ agentstack add skill-alexandrbasis-claudops-cursor-cli Open-source listing — not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Pipes remote content directly into a shell (remote code execution).
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Cursor CLI Integration Skill
> Announcement: Begin with: "I'm using the cursor-cli skill for cross-AI validation with Cursor."
Invoke Cursor CLI (Composer 2 model) for one-shot code review, approach validation, and cross-AI verification.
Self-Update: Official Documentation
When the skill feels outdated (wrong flags, unknown model, new features), consult these official sources to update commands and reference files:
| Resource | URL | |---|---| | CLI Overview | https://cursor.com/docs/cli/overview | | Headless Mode | https://cursor.com/docs/cli/headless | | Output Format | https://cursor.com/docs/cli/reference/output-format | | Composer 2 Model | https://cursor.com/docs/models/cursor-composer-2 | | Install Script | https://cursor.com/install |
Use WebFetch or mcp__exa__web_search_exa to check for updates when:
- A cursor command fails with an unknown flag error
- The user mentions a cursor feature not covered here
- The user explicitly asks to verify the skill against upstream docs
> Last verified: v2026.03.20 (March 2026), pinned model composer-2
Prerequisite: Verify Installation
Before the first cursor call in a session:
agent --version
Update only if (a) a flag fails with an unknown-flag error, (b) the user explicitly asks, or (c) the version is older than the one pinned at the top of this file. The install script is a curl | bash — run it interactively, not silently, so the user sees any installer output:
# Run only when needed
curl https://cursor.com/install -fsS | bash
If agent is not installed at all:
curl https://cursor.com/install -fsS | bash
> Critical: The binary is agent, NOT cursor. The cursor binary is the GUI app launcher (Electron) — it does not work in headless mode.
Core Patterns
1. Custom Prompt (most common)
agent -p "[prompt with explicit file paths]" \
--model composer-2 --mode=ask --trust \
--output-format text > /tmp/cursor-result.txt 2> /dev/null \
&& echo "Cursor completed"
Then read with Read tool: /tmp/cursor-result.txt
2. Code Review
agent -p "Review these files for bugs, security issues, and improvements:
- path/to/file1.ts
- path/to/file2.ts
Check against requirements in: tasks/task-doc/tech-decomposition.md
Focus on: correctness, edge cases, error handling" \
--model composer-2 --mode=ask --trust \
--output-format text > /tmp/cursor-review.txt 2> /dev/null \
&& echo "Review completed"
Then read with Read tool: /tmp/cursor-review.txt
3. Background Execution (for long tasks)
For complex tasks that take 2-10 minutes:
# Use Bash tool with run_in_background=true
agent -p "[complex prompt]" \
--model composer-2 --mode=ask --trust \
--output-format text > /tmp/cursor-result.txt 2> /dev/null \
&& echo "Cursor completed"
Workflow:
- Run with
run_in_background: trueon the Bash tool - Continue working on other tasks while cursor runs
- You'll be notified automatically when it completes
- Read
/tmp/cursor-result.txtwith the Read tool - Summarize findings to the user
Output capture
Why it matters
Without redirection, Bash returns thousands of tokens of verbose output. With the redirect pattern, you get ~30 tokens. Use this pattern on every invocation.
Pattern: --output-format text > /tmp/cursor-result.txt 2> /dev/null && echo "Cursor completed"
Read with the Read tool (not cat) so the file is registered with the harness and counted once.
Required flags for cross-AI review
| Flag | Why | |---|---| | --model composer-2 | Pins to Cursor's Kimi-K2.5 lineage — the whole reason to use this skill instead of codex/antigravity. Without it, you get a default that may duplicate another CLI. | | --mode=ask | Read-only mode, enforced at the CLI level. A review must not modify files. | | --trust | Bypasses the workspace-trust prompt, which would otherwise hang headless mode. |
Do not use --force or --yolo here — those authorize writes, which defeats the read-only guarantee above.
Cursor Has No Context From This Conversation
Cursor starts with zero context. Always include in your prompt:
- Task/requirement file paths — so cursor knows what to check against
- Implementation file paths — so cursor knows what to review
- Directory paths — for broader context
File paths are referenced directly in the prompt text (no @path syntax like Antigravity).
Example:
agent -p "Review the implementation in:
- {{SRC_DIR}}/application/sessions/use-cases/create-session.use-case.ts
- {{SRC_DIR}}/infrastructure/web/dto/sessions/create-session.dto.ts
Check against requirements in: tasks/task-2026-01-09-feature/tech-decomposition.md
Focus on: correctness, edge cases, error handling" \
--model composer-2 --mode=ask --trust \
--output-format text > /tmp/cursor-result.txt 2> /dev/null
Parallel with sibling CLI skills
When the caller wants perspectives from multiple external CLIs (e.g. codex + cursor + antigravity) on the same diff or question, issue the three Bash calls in the same turn rather than sequentially. The calls have no dependency on each other and the external CLIs take 1-10 minutes each — serializing them multiplies wall-clock time.
One-Shot Only
Cursor runs non-interactively via -p. No follow-up questions, no conversation. Craft your prompt to be complete and self-contained.
When NOT to Use
- Simple, quick tasks (overhead not worth the 1-10 min wait)
- Tasks requiring interactive conversation/refinement
- Trivial changes (typos, formatting)
- General "review this code" requests where no sibling-AI perspective was asked for — those belong to
/sror other primary-review skills; cursor-cli supplements, it does not replace. - When the user is iterating live on code and wants fast feedback — primary Claude is lower-latency.
Unique Strengths
Compared to codex-cli and antigravity-cli, cursor-cli offers:
- Composer 2 model: Fine-tuned Kimi K2.5 — a non-OpenAI/non-Anthropic model lineage, providing a genuinely different perspective in cross-AI validation
- Explicit read-only mode:
--mode=askguarantees no file modifications (enforced at CLI level) - Cloud agent:
-cflag offloads heavy tasks to Cursor's cloud infrastructure for complex analysis
Reference Files
Read these as needed — they are NOT loaded into context automatically:
| File | When to Read | |---|---| | reference.md | Need exact flag syntax, model list, config options, or error handling | | templates.md | Need a structured prompt template for a specific review type |
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: alexandrbasis
- Source: alexandrbasis/claudops
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.