Bugbot “only when mentioned” is ignored on cursor[bot] PRs

Support Bug Reports
, ,
1

Where does the bug appear (feature/product)?

Bugbot / Security Review Agent

Describe the Bug

Bugbot is set to manual / only when mentioned on my account, but it still auto-runs on PRs opened by cursor[bot] (cloud agents).

My own PRs stay manual. Bot-authored PRs do not inherit that setting, so the repo default (run on open) still fires.

Steps to Reproduce

  1. Set Bugbot to only when mentioned (personal setting) at https://cursor.com/dashboard/bugbot
  2. Let a cloud agent open a PR as cursor[bot]
  3. Bugbot posts a review ~20 seconds later with no bugbot run / @cursor review comment
  4. Compare: a PR authored by me does not get Bugbot unless I mention it

Expected Behavior

If I set Bugbot to manual, it should not auto-run on cloud-agent / cursor[bot] PRs in my repo either. One setting should cover those PRs.

Operating System

Other

Version Information

Repo: NetanelH2/mentor
Example auto-run: https://github.com/NetanelH2/mentor/pull/677 (author cursor[bot], Bugbot comment https://github.com/NetanelH2/mentor/pull/677#issuecomment-5283179968 about 20s after open, commit b065a0eb)
Control: https://github.com/NetanelH2/mentor/pull/676 (author NetanelH2, no Bugbot)
Control: https://github.com/NetanelH2/mentor/pull/667 (Bugbot only after I commented bugbot run)
Related agent: https://cursor.com/agents/bc-019ffbe0-2c51-74a8-931a-dae8d95095c2

Additional Information

Approver running on the PR did not cause this — Approver also ran on #676 and Bugbot stayed off. Workaround would be repo-level manualTriggerOnly, but the personal “only when mentioned” toggle should apply to agent PRs in my repo.

Does this stop you from using Cursor

Sometimes - I can sometimes use Cursor

7

Hey there! There isn’t a per-repo trigger-mode toggle for an individual setup yet, so the cleanest workaround today is to have your cloud agents open their PRs as drafts - Bugbot won’t auto-review a draft, and commenting bugbot run still works whenever you do want a review. Mark the PR ready afterward and you’re set.

Worth flagging that disabling Bugbot for the repo isn’t a good substitute, since that turns off the manual trigger too.

What you’re seeing isn’t intended behavior - your “only when mentioned” setting should carry over to those PRs. We’ve let the team know and it’s an issue we’re tracking. I’ll post here when there’s an update.