Same issue here — repro details below.
Cursor: 3.17.19, macOS
Plugin: an internal plugin installed from a GitHub marketplace URL; 7 subagents as .md files in the plugin’s agents dir, each with a model: pin in frontmatter
Frontmatter example (bug-hunter.md):
---
name: bug-hunter
description: "Adversarial correctness review of a branch's diff…"
model: claude-sonnet-5
readonly: true
---
How verified: spawned each of the 7 subagents (jira-reader, figma-reader, bug-hunter, …) and checked which model actually served the run — it was always the session model, never the pinned one. E.g. a subagent pinned to composer-2.5[fast=false] ran on the session model (Grok 4.6 Medium) — screenshot attached.
Two extra data points:
- It’s not marketplace-only. Re-tested 2026-08-24 with the same plugin installed via a local symlink route — pins are ignored there too, so model routing is lost on every install route.
- The fallback is silent: an unresolvable
model:value also just runs on the session model with no warning (likely the same root cause as this thread).
Request ID: 92e9d3f7-86f0-4c5f-a701-298f563c8b73