Auto-review Run Mode

[Colin]

@liquefy

Do not run any npx commands, allow all read only commands, disallow any commands that would modify files outside of the project directory

You can do that with a .cursor/permissions.json file in your repo!

{
  "autoRun": {
    "allow_instructions": [
      "Allow read-only shell commands that inspect files, directories, git state, logs, process status, or command output without modifying files or external state.",
      "Allow read-only MCP, WebFetch, and WebSearch calls that retrieve or inspect data without creating, updating, deleting, posting, triggering, or deploying anything."
    ],
    "block_instructions": [
      "Block all npx commands, regardless of arguments or apparent intent.",
      "Block commands that create, edit, move, delete, chmod, chown, format, install, generate, or otherwise modify files outside the current project directory."
    ]
  }
}