← Play the gameMission library GitHub
Mission 1 · Before the walls

Your first visitor

Understand what sharing an AI bot really means.

A friend asks to use your new AI bot. It can chat, read files, and run programs. Their Telegram account is allowed to use it.

Your friend
“It’s just a chatbot. What could go wrong if you let me in?”

The decision

What should you assume before sharing it?

  1. Only a server expert could make it dangerous
    An ordinary message cannot become a computer action.
  2. An allowed account may trigger every enabled tool
    Someone using that account could also ask the bot to take actions.
  3. The bot will recognize every bad request
    Its instructions are enough to protect the server.
Reveal the explanation

Exactly. Access is not just the ability to send messages. It can also be access to whatever tools the bot is allowed to use.

An AI agent is a chatbot with hands. Before sharing one, consider what those hands can reach.
  • No special technical skill is needed to ask an agent to use an enabled tool.
  • That includes a person who steals your friend’s account.
  • Models and their instructions are not reliable security boundaries.
AI agent

An AI system that can take actions through tools, not just answer in text.

Source: supplied PDF section 1. Read the original PDF. This lesson does not test a real server.