Let the agent apply changes without prompts
print mode & automation
// what it does
In print mode there is no one to approve commands, so writes and shell calls need --force (aliases -f and --yolo), which allows any command that is not explicitly denied. In a session, /run-everything (alias /auto-run) toggles the same behavior. permissions.deny entries still block, so force is not a total override.
// shell
$ cursor-agent -p "update CHANGELOG.md for the latest release" --force// gotcha
--force removes the per-command approval gate entirely; in CI prefer a permissions.allow list scoped to the tools you actually need, so a prompt-injected instruction cannot run arbitrary shell.