When skipping command sometimes it runs anyway

Describe the Bug

I skipped a command to build and then saw that that command had been executed anyway. So i watched for it and found this instance where it started the terminal but didn’t actually run anything

here is the request ID from the screenshot and screen recording: 3b74a314-688e-4183-a8bf-8e8e55b683f0

Steps to Reproduce

Skip a command (doesnt always work) and see if it starts a command terminal or see if that command was run

Expected Behavior

when skipping a command it should NEVER run it

Screenshots / Screen Recordings

Operating System

MacOS

Current Cursor Version (Menu → About Cursor → Copy)

Version: 1.4.3
VSCode Version: 1.99.3
Commit: e50823e9ded15fddfd743c7122b4724130c25df0
Date: 2025-08-08T17:34:53.060Z
Electron: 34.5.1
Chromium: 132.0.6834.210
Node.js: 20.19.0
V8: 13.2.152.41-electron.0
OS: Darwin arm64 24.6.0

Does this stop you from using Cursor

No - Cursor works, but with this issue

hi @jrushford and thank you for the bug report.

Skip in this case means skip watching for the output, the command has likely been started already.

Wow really? how can i stop it from running the command entirely? like for example, it will often try build my project, but i dont want it so because the output directly setup is weird.
Or more importantly, what if it want to delete a file i dont want it to delete?

Do you use auto-run mode?

You can configure an allowlist, and set additional options in Settings > Chat

Usually telling the model why it should not use certain commands helps with the models understanding. There is however apart of manually checking the commands no automatic way to prevent a model from using a command since it can find ways around attempts to block.

Auto-run mode is set to ask every time, i also have an allow list.
This doesn’t seem like correct behavior, if it is set to ask every time and then when it asks, i press skip, it definitely should not run that command.

Makes sense about explaining to the model when and why, but how do i do that? when I click “reject and tell what to do differently” does that information stay in the memory? Where can I audit the memory about my project?

The Memory is in Settings > Rules & Memories.

You can add User Rule there in same settings page

You may not run command x as it (does something bad).

Are you saying that even though I have command on always ask, i also need to tell it which commands not to run?
I saw on reddit people saying it ran very damaging commands, so I’m pretty nervous knowing it can ignore my command to skip, even when it is set to ask every time.
I would like an option to say no, don’t run this

If you are on always ask then a command should not run until confirmed.

Some users use it with all precautions disabled and yes AI may hallucinate and do something that can remove data.

We do not have an denylist because AI finds a way to work around that. This is why we use an allow list.

In general it is not advised to use Auto run without additional security precautions like using a virtual machine or isolated development environment.

We do have additional security settings for auto-run in Settings > Chat > Auto-Run section. They may additionally strengthen the security.

Ok, i think we are back to the original problem then, because the screenshot and recording i sent you was on “always ask" and you can see in the video where i click skip