Hey! Thanks for creating this thread (and for the thorough report, including the discovery that zsh works as a workaround).
This is a confirmed issue on our side. The CLI native binaries are properly signed but not fully verified by macOS Gatekeeper in certain install scenarios, which triggers the security prompts you’re seeing.
Workaround (in addition to the zsh method you found): After installing, you can strip the macOS quarantine flag from the CLI files:
xattr -cr ~/.local/share/cursor-agent/
For Homebrew installs:
xattr -cr /opt/homebrew/Caskroom/cursor-cli/
You only need to run this once per install or update. You may also find this related thread helpful, where another user reported the same class of issue.
We’re aware of this and working to address it in the install process. Let me know if the workaround resolves it for you!