From Dev.to
How to Audit Third-Party SKILL.md, .cursorrules, and mcp.json Files for Prompt Injection and Exfiltration
Developers using Claude Code, Cursor, Windsurf, and Cline regularly clone repositories or install community SKILL.md, .cursorrules, CLAUDE.md, and mcp.json files directly into their local workspaces....