Skills Explorer Add Skills

debug-voice

An agent skill by cursor, from cursor/plugins. Tags: audio, debugging, logging, troubleshooting, validation.

What it does

Use when the user runs /debug-voice, says voice mode has flaws, asks to see or capture what happened in a Grok realtime voice session, or a voice integration has no debug logging yet. Proposes a plan, then installs a dev-only log pipeline (client logger → local NDJSON) in the app's own language and conventions, then runs the fix loop: match the user's report to log signatures, fix one thing, re-test.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add cursor/plugins --skill debug-voice

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/cursor/plugins
cp -r plugins/grok-voice/skills/debug-voice ~/.claude/skills/debug-voice

Safety box score

Grade B, low risk: 16 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This is a dev-only voice-debugging skill that adds local logging, a local HTTP sink, and UI changes inside the app. The main blast radius is limited to the project directory, but it does create persistent voice-session logs and depends on remote xAI docs for event names.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution1 (low)It includes local shell verification commands (`curl`, `jq`) and instructs the agent to install app-specific logging code, but it does not ship an executable script or ask for `eval`/downloaded code.
Network access1 (low)The only explicit data flow is to a local dev sink (`POST /api/voice/log` on localhost); the skill also references an external docs URL, but not as a code-download mechanism.
Filesystem reach1 (low)It writes `.voice-logs/<sessionId>.ndjson`, asks to add `/.voice-logs` to `.gitignore`, and modifies app files, but the scope is intended to stay inside the project tree.
Secrets & credentials0 (none)The skill explicitly says "Never tokens, keys, or raw audio" and the log contract redacts those fields; it does not request credential stores, browser sessions, or pasted secrets.
Privilege & persistence0 (none)No sudo, global installs, services, scheduled tasks, or shell/OS settings are requested.
Instruction hijack surface1 (low)It tells the agent to consult a remote docs page before adding event names (`"confirm in https://docs.x.ai/..."`), but it still keeps the workflow user-confirmed and does not contain hidden prompt text.
Irreversible actions0 (none)It is a debug-and-fix workflow only; it does not deploy, publish, send messages, or make external side effects beyond local logging.
Transparency0 (none)The skill text is plain markdown with no binaries, base64 blobs, or generated installers.

Before installing

Rated 2026-10-16 by an automated review of 1 file from the skill's repository.

Source

Repository
cursor/plugins (all skills from this repository)
Path
grok-voice/skills/debug-voice/SKILL.md
Branch
main
Collection
cursor
Updated
2026-09-23