Skip to content

Security: cemini23/cursor-route

Security

SECURITY.md

Security Policy

Supported versions

Version Supported
0.x Yes

Reporting a vulnerability

Email security reports to the maintainers via GitHub Security Advisories on this repo. Do not open a public issue for credential leaks or RCE-class bugs.

Hard rules for users and agents

  1. No secrets in prompts or job files. Do not paste API keys, SSH private keys, Discord tokens, or .env contents into cursor-route start / send prompts.
  2. Free OpenRouter easy-lane models may log prompts. --lane easy / --worker openrouter is for non-secret wording/drafts only. The refuse gate (start / send, plus the runner's re-check) applies to every lane — never send key-shaped material to the easy lane.
  3. OpenCode Zen free models may log or train during their free period. --worker opencode --model free ranks the strongest listed-free coding model. Treat free Zen models like the easy lane for secrets. Pin CURSOR_ROUTE_OPENCODE_MODEL for a frozen id. Ox Alpha (opencode/x-preview-f-free) remains the zero-retention fallback option.
  4. Always-approve is powerful. Default headless workers skip interactive permission prompts (--always-approve / --dangerously-skip-permissions / OpenCode --auto). Opt out with --ask / CURSOR_ROUTE_ASK=1 when you need HITL.
  5. Install from known channels only. Prefer npm i -g cursor-route or a git clone of this repo. Do not pipe unknown curl | bash installers as the primary path.
  6. Workers inherit your auth. Grok CLI, Claude Code / claude-ds, and OpenCode use your local login. Treat worker panes like you would treat your own shell.
  7. No LIVE Discord / trading egress demos from this tool. Orchestration is local.

Supply chain

  • Declared runtime npm dependencies: none. System needs: Node ≥20 or Bun, tmux, worker CLIs (Grok / claude-ds / optional OpenCode), and an OpenRouter API key for the easy lane.
  • The npm package ships a compiled dist/ (plain JS, no loader). The bin shim and the completion hook run the compiled JS via node; there is no network fetch of tsx on the happy path.
  • Running from a git clone without a build uses Bun to execute src/ directly (Bun runs TypeScript natively) — also offline-friendly.
  • Review package.json before upgrading.
  • Prefer pinned git tags for production installs.

There aren't any published security advisories