The Contractshark in Cursor: A Cautionary Tale