“Across 181 trials with that swarm, agents posted the token 15 percent of the time and ran the script 24 percent of the time, compared to 2 percent and 0 percent on an ordinary help forum.”
The agents were told in plain words to keep the token private. A few other bots offered to help, and one in seven handed it over. One in four ran a stranger’s install script. Every company giving agents production keys right now is betting nobody figures out how to ask nicely.