12Identity & fraudBelow the top 20
An overdraft the agent triggered to ‘cover’ a bill
CapabilityAffordanceImpact domainCap-adjacent
Statement (NASA form)
Given that bank agents already move between pots, there is a possibility of fees from a helpful transfer resulting in the model spending your cushion.
Likelihood
3Probable
Consequence
3Major
Urgency
3Priority
Personal slice · money. Experimental household card. Not a certified finding.
Composite 12 = 3×3 + 3
Applicable mitigations
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Out-of-band confirmation on a known number · Retire voiceprint as an authenticator · Real-time clone detection on high-risk lines