It sems like the Cursor team has acted on this bug report, but instead of only blocking the mutating commands like git commit, git revert, and git push, they blocked all terminal access while in Ask Mode, even when using an allowlist full of vetted read-only commands. So now the Ask Mode agent cannot run useful read-only commands like git log, git diff, git status. See the following posts:
The workaround is to use Agent Mode instead of Ask Mode, but then the agent has access to its file edit tools.