The LLM is attempting to run commands (cd/gh/run) and even though we’re in allowlist mode, it is not prompting to allow the command, instead its just skip or run.
Steps to Reproduce
Not sure specifically, just asking it to run github commands.
Hey, thanks for the report. According to the docs, when a sandboxed command hits restrictions, there should be three options: Skip, Run, and Add to Allowlist. In your screenshot, the third option is clearly missing, so that’s a bug.
As a workaround, you can manually add commands to the allowlist: Cursor Settings > Agents > Auto-Run > Command Allowlist. For example, adding gh there will allow all gh commands to run automatically without asking for confirmation.
I’ve shared this with the team. Let me know if the workaround helps.