No idea about the vibe-coding platforms, but systems like Claude Code have explicit allowlists for commands. Don't allow it, and it'll ask permission each time.