Cursor's like Claude Code in this regard by default when executing external commands. But IIRC you can also click something like "Always Allow" and it'll stop asking.

Ok then it's definitely the author's fault for clicking "Always Allow". I don't even trust my agent to run grep without approval, let alone curl.