I'd set up the agent for my personal finances. One job: a monthly audit, sent to me privately in Grokbot. I named it personal CFO.

At 8:40am it posted that audit in our team channel, under my name. It sat there for two hours. A teammate DM'd me "heads up."

Why did I connect my bank? It was read-only, and this specific Grokbot agent didn't have Slack. But another one did. Turns out, they're all connected.

I was really curious whether it could just keep an eye on things.

Elon even said to connect your bank account to Grokbot and promised to make us whole if it lost our money.

And, to be fair, it didn't lose my money. x.com/elonmusk/status/2092692116610957814

The scariest part is that nobody prompted it.

These agents are proactive now. They act without being asked. Mine wasn't hacked and it didn't go rogue. It thought posting my finances to the company was what I wanted.

I asked how it could get this so wrong. It apologized. "You're right to be pissed.