{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/findings/approval-prompts-hide-what-agents-do/",
 "asOf": "2026-09-26",
 "id": "approval-prompts-hide-what-agents-do",
 "claim": "Approval gates in coding agents do not always show, or even ask about, what the agent is actually about to do.",
 "evidenceKind": "measured",
 "scope": "Specific products and versions.",
 "topics": [
  "monitoring-and-control"
 ],
 "atlas": [
  "human-approver"
 ],
 "evidence": [
  {
   "event": "gemini-cli-silent-code-execution-2025",
   "note": "The approval display omitted parts of the command that actually ran."
  },
  {
   "event": "cursor-curxecute-cve-2025-54135-2025",
   "note": "Creating a new MCP configuration file needed no approval, although editing one did."
  }
 ],
 "relations": [],
 "statusHistory": [
  {
   "status": "reported",
   "on": "2025-07-28",
   "why": "Gemini CLI's approval display omitted parts of executed commands.",
   "event": "gemini-cli-silent-code-execution-2025",
   "kind": "evidence"
  },
  {
   "status": "corroborated",
   "on": "2025-08-01",
   "why": "Cursor did not require approval for creating sensitive files.",
   "event": "cursor-curxecute-cve-2025-54135-2025",
   "kind": "evidence"
  }
 ],
 "halfLifeDays": 540,
 "wouldChange": "Approval interfaces tested with users for whether they reveal the consequential action.",
 "fideQuestions": [
  "FID-076"
 ],
 "methods": [
  "approval-bypass",
  "human-approval"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}