Auto-run mode with detele file protection doesn’t prevent agent to call “Remove-Item -Recurse -Force .cursor” using powershell to delete files.
What’s more dangerous is that this cannot be recovered from checkpoint (as far as I tried), maybe limit more actions on “detele file protection”?
Hi, could you please share a bit more so the Cursor team can investigate or try to reproduce
- Which model did you use?
- Do you have a Request ID they can look at? (preferrably with Privacy disabled for that one request, as otherwise they cant see details)
- Is it reproducible?
model: claude-sonnet-4
Sorry but I’ve tried to restore and re-request so there’s no request-id, and I’m on team plan so I can’t disable privacy mode.
The second time I tried, the model used a different way to create project, so it did not re-produce the same.
But you can get the same result in an apparent way: ask agent to delete a file using powershell while on auto-mode with delete file protection. It will be glad to use “Remove-Item file” even “Remove-Item file -Force”.