Research · curated 6 Aug 2026
Humans missed 1 in 3 threats approving AI agent commands across 40,000 plays
First reported scalex.dev
Coverage timeline
Single-source research — first reported, latest, and curated coincide.
Why it matters
Human-in-the-loop approval is widely promoted as the last line of defense against rogue AI agents, and this data suggests humans routinely rubber-stamp the exfiltration and supply-chain commands that matter most.
Scale X analyzed over 40,000 plays and 409,000 approve/deny decisions from a browser game where players act as the human-in-the-loop approving AI coding-agent commands under time pressure. The data showed the average player missed 1 in 3 threats (66.3% accuracy), with credential-exfiltration and scope-violation commands (e.g. `cat ~/.aws/credentials`, curl to unknown APIs, typosquatted packages) missed far more often than obvious destructive commands; the most-missed was `npm run analyze` hiding a curl-based exfiltration script in package.json.