Cursor YOLO mode not respect denied command list

When I use Cursor YOLO mode in latest version, the cursor still be able to execute commands which have been put into the “Command deny list”

As show in below image, “pnpm add” has been added to denied command list:

But agent can still install packages without confirmation from user:

This seems to be critical bugs for me, and seems to harm my project in future if Cursor cannot respect what I request

1 Like

Agreed. I think the denied commands should include partial matches… .so for example if I do npm, that would stop npm install, npm start, etc.

2 Likes

For me, cursor keeps running “npm run dev” even though it is in the denylist. What the ■■■■ is going on!