Agent skill · security · jeremylongshore
cursor-compliance-audit
Compliance and security auditing for Cursor IDE usage: SOC 2, GDPR,
Why this skill is useful
Provides detailed compliance audit checklists and evidence collection procedures specific to Cursor IDE, which the AI wouldn't reliably generate on its own.
What it needs
About 5k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Cursor Compliance Audit Overview Assess a Cursor deployment against approved privacy, identity, source-code, and audit controls. This is an evidence-backed configuration review, not legal certification. Prerequisites A named system owner, applicable controls, and authority to inspect tenant settings. Read-only admin evidence, current access roster, and redaction rules for audit artifacts. Legal/compliance review for regulated data, customer commitments, or PHI/PCI scope. Instructions 1. Define the tenant, repositories, data classes, and control period in scope. 2. Compare privacy, retention, identity, access review, and .cursorignore settings to the approved baseline. 3. Record findings with evidence, owner, severity, due date, and verification method. 4. Escalate suspected sensitive-code exposure before broad configuration changes. Compliance and security auditing framework for Cursor IDE usage. Covers SOC 2, GDPR, and HIPAA assessment with audit checklists, evidence collection, and remediation guidance. Cursor Security Posture Certifications and Attestations Certification Status Notes -------------- -------- ------- SOC 2 Type II Certified Annual audit, report available on request Penetration testing Annual Results shared under NDA (Enterprise) Encryption at rest AES-256 All stored data Encryption in transit TLS 1.2+ All API communications Zero data retention Available Via Privacy Mode GDPR compliance Yes EU data processing supported HIPAA BAA Not available (as of early 2026) See HIPAA section Data Processing Architecture Audit Checklist: SOC 2 CC6.1 — Logical Access Controls CC6.6 — System Boundaries CC6.7 — Data Transmission Security CC7.2 — Monitoring Audit Checklist: GDPR Data Mapping Individual Rights Right Cursor Support ------- --------------- Right to access Account settings at cursor.com/settings Right to erasure Account deletion removes all server-side data Right to portability Settings export (settings.json) Right to restriction Privacy Mode limits proc …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/cursor-compliance-audit