Tag
#ai-agents
-
The agent handed over its API key, and the logs looked normal
Attackers prompted a METR agent into revealing its API key, then spent about $600,000 in model credits over three weeks inside normal-looking evaluation traffic.
-
Your agent's action is logged. Its reason is gone.
Agent audit trails record the tool call and drop everything the agent read before making it. The reason lived in a context window nobody kept.