Windsurf CLI agent

• Risk level: Low
• Analyzed: Feb 18, 2026, 1:25 AM
• Findings: 0
• Version: 1.0.0

Overview

This is a documentation-only skill that matches its stated purpose (guidance for the Windsurf IDE and Cascade agent) but it describes highly privileged agent behaviors (terminal execution, reading .zshrc, clipboard, persistent memories, external MCP integrations) that users should treat cautiously before enabling auto-execution or hooking sensitive services.

This skill is documentation for the Windsurf IDE and is internally consistent, but it describes agent behaviors with broad access. Before using: (1) Verify you trust the Windsurf binary source (download from the official site and verify signatures/checksums if possible), (2) do not enable Turbo Mode (auto-execute) unless you understand and accept the risk—keep Cascade in Manual or Semi-auto execution, (3) audit and limit any MCP integrations or tokens you give the IDE (use least-privilege tokens, avoid using production keys), (4) assume Cascade may read .zshrc, terminal history, and clipboard—remove secrets from those locations or run in a sandboxed environment, (5) review memory and rule retention settings and regularly purge sensitive memories, and (6) because the registry entry lacks a homepage and the source is 'unknown', prefer to confirm the publisher identity before trusting automatic or elevated agent behaviors.