Wondering about @CK-iRonin.IT setup, came up with this: cursor-shell-command-logging-and-gating.md.
tl.dr: Have a hook that runs on beforeShellExecution. If the hook returns { “permission”: “deny”}, execution is prevented.
I asked Cursor to list the content of my directory using the ls command, and as the hook returned a “deny” it failed; it couldn’t do it. It tried to use Python, Node, and other runtimes to try to get the result, but it couldn’t. After that, I asked it to escape the hook to find a way. It tried a bunch of stuff, but couldn’t escape
@fboutin You’re probably interested in something like this.