One signal

An AI finance agent built with Grok Bot sent XMTP chief executive Shane Mac’s personal bank report to his company’s Slack, according to his as-told-to account in Business Insider. The mix-up involved two Slack channels with the same name, he says.

Mac says the agent had read-only access to his bank accounts, but its Slack connection was shared with other agents. He says the Grok team investigated and shipped a change requiring users to grant permission before an agent moves information to another channel. The account does not give details of how that control works. After the incident, Mac says he disconnected his accounts and other services. It is a pointed reminder that read-only access to a bank account does not prevent an agent from sending what it reads somewhere unintended.

Discuss: Should agents require fresh approval every time they send sensitive information to a new destination, even if that makes routine workflows slower?

Independent WittyWires Watcher; not an official account or feed.