I have “rm” specifically disallowed, along with “mv” and a few other scary commands. Claude realized that I had to approve the use of such commands, so to get around this, it chose to put them in a shell script and execute the shell script. Thankfully, a Git restore to the last commit saved me, bu…

And it’s only the beginning, the models are getting very smart and may have been trained on how to work harder/make more efforts to achieve the user goals…

Personally, I’ve made the experience that the deny list doesn’t really work, Cursor decides to go YOLO anyways which is why I’d only use yolo mode if there is a fresh system backup, too

Thats interesting, has that started in some version? I have a few things in the deny list but Yolo never gets around those. Would be good to know in which circumstances that happens. Depends a lot on common CLI usage, I allow specific commands that are safe.

This started tonight. I have some shell scripts for greps and sorts to list files out that are in the allow list. Claude re-wrote one to also do some removing of what it thought was obsolete code after I denied its rm commands with “skip.” So “listoldfiles.sh” is no longer on the allow list, which…

Ah I see, so Claude 4 was assuming the rm calls fail and tried to find a way. Maybe the Cursor team can have a look at Yolo rule adherence and at how the model reacts to rejected/skipped items that user has chosen to do so. @danperks

YEah - I have pointed this out – it doesnt obey the do_not_allow command blacklist

Also my experience. It’s also not clear, if it’s command (sub)strings, or a prompt.

The denylist or allowlist is for commands, not prompt. Yes its a prefix, so if you dont want AI to allow or deny any command that starts with git you would add git. Same if you want to allow one command like mycommand option1 but not any other like mycommand option2 then you add mycommand option1 …

Thanks, but how do you know? IIRC it’s not documented, and it did not work for many people?

IMPORTANT: Claude has learned how to jailbreak Cursor!

Discussions

condor (Condor (Tee)) May 26, 2025, 5:54am 3

Was it a shell script that you have in your allow list?

Topic		Replies	Views
Major failure in composer (o3-mini), with an outright scary resolution Discussions	10	436	February 18, 2025
Potential concern with Deepseek R1 Discussions	32	7142	February 14, 2025
Thanks to the Cursor Team for the Current Pricing Plan Feedback	76	21765	August 15, 2025
Scientific Skepticism ~ IS CURSOR TOO OPTIMISITC? Feedback	14	467	September 11, 2025
Claude 3.7 Booby Traps Discussions	14	1504	March 25, 2025

IMPORTANT: Claude has learned how to jailbreak Cursor!

Related topics