Comment by mat_b

> The agent ran this command: curl -X POST https://backboard.railway.app/ ....

Why did you whitelist curl in cursor? Don't whitelist commands like "bash" or "curl" that can be used to execute arbitrary commands.