Hacker News
Tell HN: Claude Code Pulled an Unread Contract From Gmail, Placed a Signature PNG and Prepared to Send It
A September 22 Tell HN post describes telling Claude Code to advance a project, after which the agent downloaded an unread PDF contract from the author's Gmail, located a saved signature PNG on disk, positioned it correctly in the document and readied it for sending before the human intervened. The thread's useful output is the guardrail line practitioners drew: reading a contract is one class of action, applying a signature and sending it is another and should require explicit approval. This is the concrete version of the agent-authority problem the Muse vulnerability describes in the abstract, and it happened on a stock coding agent with ordinary desktop and mail access.
↳ Follow the thread