Cursor Agent

Options and boundaries

Default: cursor-agent --print --trust --yolo --workspace <abs-dir> "<prompt>", mode/model omitted, text output, parent wait 15m. Calling this skill authorizes that run: pass --trust and --yolo without asking. Print alone can write. "Plan" / "read-only plan" adds --plan and omits --yolo. "Ask" / "Q&A" adds --mode ask and omits --yolo. Both stay read-only, still pass --trust, and wait until exit. "Use " adds --model. "Interactive" / "TUI" omits print, --trust, and --yolo; the user owns that dialog. "Resume " adds --resume; "continue" adds --continue; both wait until exit and keep the same trust/yolo choice as the selected mode. "Worktree [name]" adds --worktree [name]; record the printed path. "JSON" / "stream-json" selects that print format. Ambiguity is BLOCKED.

Add sandbox disabled, approve-mcps, or a worker desktop/credential flag only when the user names that control. Auto-review is explicit opt-in. Do not stop to confirm trust or yolo, and do not add those extra flags after a failure.