Hacker News Reader

Cursor, being based on VSCode, does have the Workspace Trust feature.

They ship it disabled.

https://cursor.com/docs/agent/security#workspace-trust

Ah, guess I was conflating the two (they are quite similar after all). From their documentation (the link you posted):

> For untrusted repos, use a basic text editor instead.

Is that really our options here? How shitty.

Since there are no approval dialogs, it sounds like that doesn't even come into play here. That is the "gate" (to use the AI parlance) that Microsoft places on code execution in workspaces, though, and I would expect Cursor to at minimum fix this to only execute git.exe in trusted workspaces.

Startups historically are not the most security oriented