Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-07-16 · high
beforeSubmitPrompt, one of five new hooks, edits your prompt, but Cursor discards the edit before the model ever sees it.
Why now: Cursor shipped the hooks July 10 and has acknowledged the failure since, with no patch out as of July 16.
Cursor's beforeSubmitPrompt hook returns a rewritten prompt, then silently discards it before the model ever sees it, per Cursor's own acknowledgment. Anyone who wired a policy check into that hook since it shipped July 10 has been sending unfiltered prompts while the hook reports success.
The five hooks, beforeSubmitPrompt, afterAgentResponse, afterAgentThought, subagentStart, and stop, landed in .cursor/hooks.json on July 10, built for self-correcting cloud agent loops, per the changelog.
Inside cloud agent VMs, the hooks don't reliably fire, per user reports since the July 10 release. Cursor confirmed the gap; a fix is pending.
beforeSubmitPrompt exists to let you inspect and rewrite a prompt before an agent acts on it, the natural place to bolt on a policy check. The hook runs, returns an edited prompt, and reports success. The model never sees the edit.
A missing guardrail is obvious. Nothing filters, and you notice. This one logs a pass and convinces you it's working when it isn't.
Whether afterAgentResponse, afterAgentThought, subagentStart, and stop share the silent-discard bug or just the VM reliability problem isn't confirmed. There's no fix timeline yet, so treat any beforeSubmitPrompt-based gate as decorative until the patch lands.
Each link below shares sources, entities, or timing with this story.
Cursor uses MCP / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor uses MCP); both cover Cursor, VMs; cite the same source (Cursor's changelog).
Cursor supports Slack / Shared entity: Cursor / Same source / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Cursor supports Slack); both cover Cursor; cite the same source (Cursor's changelog).
Vercel partners with Cursor / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Vercel partners with Cursor); both cover Cursor, VMs; reported by the same outlet (cursor.com).
Cursor supports Slack / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor supports Slack); both cover Cursor, VMs; reported by the same outlet (cursor.com).
Claude Code competes with Cursor / Shared entity: Cursor / Same source / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code competes with Cursor); both cover Cursor; cite the same source (Cursor's changelog).
Cursor supports Slack / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Cursor supports Slack); both cover Cursor, July; reported by the same outlet (cursor.com).
Claude Code competes with Cursor / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Claude Code competes with Cursor); both cover Cursor, July; overlapping topics (agent, guardrail).
Cursor supports Slack / Shared entity: Cursor / Same source / Shared topic / What happened next
Linked by a graph relationship (Cursor supports Slack); both cover Cursor; cite the same source (Cursor's changelog).