This repo ships local Cursor hooks, rules, and install scripts for your machine and your git repos. It does not run a hosted service.

For vulnerabilities in this kit (install scripts, hook injection, manifest handling):

1. Open a private report via GitHub Security Advisories if you have access, or
2. Email the maintainer with repro steps and impact — do not open a public issue for exploit details.

For GitNexus core (indexer, MCP server, graph data), report to the upstream GitNexus project.

• Install requires an explicit target path inside a git worktree.
• Hooks only affect Cursor sessions on projects where the kit is installed.
• No credentials are stored in the bundle; wiki scripts expect API keys in your env only.