[sebmellen]

With the right approval chain it could be useful.

[jondwillis]

The agent is tricked into writing a script that bypasses whatever vibe coded approval sandbox is implemented.

[SmirkingRevenge]

Picturing the agent calling your own bank to reset your password so it can login and get RW access to your bank account, and talking (with your voice) to a fellow AI customer service clanker