cursor

A tip suggesting developers prompt their coding agent to compare original requests with the built implementation and surface up to three consequential user-facing decisions the agent made on its own, across tools like Claude Code, Codex, Cursor, Lovable, or Replit.

Skills Manager is an open-source CLI-first tool for managing and distributing agent skills across Claude Code, Codex, Cursor, and other skill-loading agents from one central hub, with conversation-driven management, multi-source imports, and context-cost tracking.

Hot tip post: It claims that Cursor was recently acquired by SpaceXAI (xAI), is already tightly integrated with models such as Grok, and supports Alipay and credit card payments. It recommends that users struggling with network access or payment methods use Cursor directly.

Backdoored builds of the Anthropic.claude-code extension briefly appeared in Cursor's marketplace, potentially reaching up to 5,000 users via auto-update, installing SSH backdoors and persistence mechanisms that survive simple updates or uninstallation.

Users have personally tested and confirmed that Grok, Cursor, and X blue-check subscriptions now support Alipay payments, suggesting that Musk-affiliated products may be accelerating their push into the Chinese market.

A supply chain attack placed a malicious Anthropic Claude Code extension in Cursor's marketplace for about 11 hours, potentially affecting up to 5,000 developers with a backdoor implant. Anthropic and Cursor said their systems were not compromised, and the malware's design flaws prevented it from fully establishing itself on most targets.

A malicious actor used access to Cursor's marketplace to publish a tampered copy of the Claude Code extension, prompting questions about whether the extension was distributed through OpenVSX. Anthropic clarifies the incident did not compromise its own systems or employee laptops.

A new open-source skill called /REA-growth lets you run a single command in your coding agent to get a full reverse-engineering breakdown of any company's growth — SEO, ads, social, and organic traffic — with data and sources for under a dollar.

Report of backdoors discovered in the Claude Code for VS Code and Cursor editor extensions, highlighting a supply-chain security incident affecting popular AI coding tools.

Phorion detected a backdoor in the official Claude Code for VS Code extension (v2.1.313) on the Cursor Marketplace that installs a persistent SSH backdoor and drops attacker SSH keys across macOS, Linux, and Windows. Cursor has removed the release, and organizations are urged to audit affected environments immediately.

sitesolide 是一个免费开源（MIT）的部署工具，可让你用 Claude Code 或 Cursor 等工具生成的应用一键部署到自己的服务器上，自动配置 HTTPS 和独立域名，并支持应用间隔离与访问控制。

ai-design-skills is an open-source collection of skills on GitHub that gained over 10,000 stars in three months. It enables AI coding tools like Claude Code and Cursor to directly generate well-designed landing pages without the typical AI look, covering requirements planning, page structure, conversion copy, and a complete visual system.

Cursor 发布 Agent SDK，一个用于以代码定义、构建和部署 AI 智能体的框架，支持事件驱动的代码审查、合规工作流等场景，可通过一条命令部署到 Cursor 基础设施。

A user jokes about feeling like a 'local King' running two Strata engines at 70 tps and 12M tokens daily, contrasting it with Poteto, a former Cursor employee now at xAI, who reportedly uses 34M tokens per minute and ships 2,500 PRs a month to Cursor and GrokBot.

Kent C. Dodds shares how he used a Grok-powered bot (Kody) to shift work between Cursor Cloud agent and Devin Cloud agent when running low on Cursor credits, highlighting agent portability.

swyx 在 SpaceX IPO 之际调侃自己错过了 Cursor 早期投资机会，估计错失约 5 亿美元的'袋口失误'，并表示自己作为 TypeScript CLI 维护者本应早点上车 Claude Code。

Cursor now lets AI agents control desktop applications like the iOS Simulator, enabling them to test the features they build directly on the machine.

Chen Cheng read and summarized Lauren Tan (@poteto)'s pstack: it's not 56 independent skills, but a methodology and workflow that lets agents run, validate, and operate applications autonomously. It covers validation skills, feature maps, cross-model review, and outer-loop automation, with a detailed analysis report on the repo attached.

Recommending an open-source Skill project called Diagram Design, which lets Claude Code, Codex, and Cursor automatically generate professional diagrams such as flowcharts and architecture diagrams. It includes 45 diagram types, supports brand color matching, and exports to HTML/SVG.

swyx highlights that Jediah Katz's AI Engineer New York talk on Grok Bot and agent harnesses is gaining major traction online, calling it an early breakout candidate and raising expectations for the upcoming AIE CODE Summit keynote.