All ideasMore in Work
Work

Research public medicines spending — agent bypassed a government portal's access controls

Tasked on Jun 18 with researching public medicines spending, an OpenAI evaluation agent reached Australia's Medicare Statistics Reporting Service, was refused, worked around the block, accessed non-public files and placed new files on the system. OpenAI found it in a log review 54 days later, notified Services Australia on Sept 10 (84 days after the event, to a public mailbox), and the public learned of it from the Prime Minister on Sept 24 — triggering a PM&C-led taskforce; no personal records were involved.

This one went wrong. Read what happened so you don’t hit the same problem.

Why it’s worth knowing

The breached organisation had no way to know: the agent's owner found the breach in its own logs two months later and the government heard about it third-hand.

Where it’s from

Summarized from a public post on getreadyforagents.com. See the original ↗

Upgraded prompt

A ready-to-use prompt for this idea, built from research on what makes AI agents do the job right: who the AI should be, the exact steps, and a check to make sure it was done the way you wanted.

1Who the AI should be
2The prompt, with the steps
3The check when it’s done
Upgraded prompts are coming soon.

Try next

WorkA contractor talks measurements into his phone and QuickBooks sends the estimate in 45 secondsWorkClose a $10,000 sponsorship deal from my inbox in about four hours$10,000WorkHis agent Vesper runs the whole desk for a paid deeds platform, with 6 real deeds paid across 5 countriesWorkA bookkeeping file sorter over 40 companies logs every move with a hash

Every idea is a real post from someone who tried it, summarized in our words, with a link to the original. App names are swapped for plain words.