Humans miss 1 in 3 AI agent threats across 40k game runs
In a browser-game where players approved or denied AI-generated commands, participants caught only 66% of malicious actions—missing one-third overall and over a third of credential-stealing commands. The results expose a serious weakness in human-in-the-loop oversight, suggesting rogue agents could slip past operators in real-world tooling.