#41 ⚙️ Remove the cursor_fix_ci_failures workflow

Summary

Deletes .github/workflows/cursor_fix_ci_failures.yml. The first commit renamed it to .yml.disabled; the second deletes it entirely, as requested.

Why

• Dormant: it triggered on workflow_run for workflows: [Test], and no workflow here is named Test, so it has never run.
• Unsafe to re-arm, especially on a public repo:
  • workflow_run runs with base-repo secrets even when the triggering run came from a fork PR, and there was no same-repo guard.
  • cursor-agent --force auto-approved shell commands while holding CURSOR_API_KEY and a write-scoped GITHUB_TOKEN, on attacker-controlled PR text and CI logs.
  • It installed through an unpinned curl https://cursor.com/install | bash, with no checksum to verify against.

Nothing else in the repo referenced it. If a CURSOR_API_KEY repository secret exists, delete it in Settings.

Testing

• make -k ci: everything passes except make audit, which reports advisories that already fail on a clean origin/main.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Wtx3dU8PQvgyubf6ZpNaG3