your cursor hook says ask. in auto-review, the command may just run

a beforeShellExecution hook that answers "ask" gets no prompt in cursor's auto-review mode. "deny" holds in every mode. what that means for hooks guarding database commands, plus a small deny hook you can test locally.