I turned auto run on since I had to give cursor permission every time to do certain read-only commands. It then went to auto-run other commands such as dropping db tables and creating new ones. Although this is more or less what I wanted to do myself, it would be nice if cursor had the granularity to auto-run some commands and not others.
My suggestion is to add another option in regards to auto run, which sits between on and off. This is to intelligently differentiate if the operation it would carry out is simply a read only command (like executing a test script), or if this would write/update/delete to some part of the ecosystem.