Cursor Account Manager + Grok Bot Sand

Cursor multi-account VSIX that switches logins, shows Auto/Other/Bot quotas, and can inject Grok Bot Sand Stream routing on Cursor 3.18.9.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
18
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/15 matched
No executable scripts0/111 script file(s) of 18
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • reads environment variables (where API keys live) in src/cdpBrowser.js: "…tform === 'win32') { const pf = process.env['PROGRAMFILES'] || 'C:\\Program Files';…"
  • spawns shell commands or evaluates code in src/cdpBrowser.js: "…dir),注入 Cursor 会话 cookie,再导航到授权页。 const child_process_1 = require("child_process"); const fs …"
  • reads environment variables (where API keys live) in src/extension.js: "…m === 'win32') return path.join(process.env.APPDATA || path.join(home, 'AppData', '…"
  • spawns shell commands or evaluates code in src/extension.js: "… __importStar(require("crypto")); const child_process_1 = require("child_process"); const cdp…"
Content SHA-256
1f2a099455c4ad72…
Commit
34e4d29864
Files
.gitignore
.vscodeignore
CHANGELOG.md
README.md
package-lock.json
package.json
+12

About

Author
kuk-888 ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
agentops
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill