#permissions

An agent was talked into sending $150,000 in Morse code

No exploit and no stolen key, just a message the model agreed to act on. Prompt injection is not a bug you patch, so what can a persuaded model express?