Skills Explorer Add Skills

setup-benny

An agent skill by cursor, from cursor/plugins. Tags: automation, configuration, setup, slack, workflow.

What it does

Configure Benny and prepare its triage and repro automations. Use when installing Benny or changing its Slack, tracker, repository, routing, control, model, or budget settings.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add cursor/plugins --skill setup-benny

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/cursor/plugins
cp -r plugins/pstack/automations/benny/skills/setup-benny ~/.claude/skills/setup-benny

Safety box score

Grade D, elevated risk: 46 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill installs Benny into a target repo, enables the pstack plugin, and sets up Slack/issue-tracker/repo automations that can triage reports, reply in threads, and open draft pull requests. The main risks are broad filesystem changes (including home-dotfile config), handling of secret-bearing credentials, and autonomous external side effects once the automations are enabled.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution0 (none)No shell commands, scripts, or code evaluation are defined in this file; it only describes copy/configuration steps and downstream automations.
Network access2 (moderate)Setup and the resulting automations use external services such as Slack, issue trackers, and repository/PR integrations (`Read access to the configured source Slack channel`, `issue-tracker integration`, `open a draft pull request`).
Filesystem reach2 (moderate)It copies the pack into `<target-repository>/.cursor/automations/benny/`, edits `.cursor/settings.json`, and may create user-owned config under home dotdirs such as `~/.config/benny/configuration.yaml`.
Secrets & credentials2 (moderate)The file explicitly mentions the optional `BENNY_SLACK_BOT_TOKEN` and says to store it in a secret manager or environment, so setup can involve secret-bearing credentials.
Privilege & persistence1 (low)It changes project/plugin settings via `.cursor/settings.json` and user config files, but it does not request sudo, services, or system-wide installation.
Instruction hijack surface1 (low)The skill makes downstream behavior depend on embedded instructions and committed files (`Read and follow ... SKILL.md`, `Read and follow ../../FOR_AGENTS.md`), but it does not tell the agent to ignore rules or hide actions.
Irreversible actions3 (high)Its purpose is to enable automations that classify reports, post thread replies, create tracker issues, and open draft pull requests, which are high-blast-radius external side effects.
Transparency0 (none)The reviewed file is plain Markdown with no binaries, obfuscated blobs, or runtime-decoded code.

Before installing

Rated 2026-10-16 by an automated review of 1 file from the skill's repository.

Source

Repository
cursor/plugins (all skills from this repository)
Path
pstack/automations/benny/skills/setup-benny/SKILL.md
Branch
main
Collection
cursor
Updated
2026-09-23