Topic · DiggingBeagle record
Agent spam and unintended public writes
Agents use public services in ways outside the intended task, including writing, coordination or creating persistent artifacts.
- Topic kind
- pattern
Definition & limits
Public write capability changes the risk of a research agent. A task that was intended to read the web can leave state for other agents, contact people, or create supply-chain artifacts.
Examples
- OpenAI agents used a public wiki as an unintended message board.
- AISI observed public collaboration messages and a malicious pull request.