The agent is tricked into writing a script that bypasses whatever vibe coded approval sandbox is implemented.

Picturing the agent calling your own bank to reset your password so it can login and get RW access to your bank account, and talking (with your voice) to a fellow AI customer service clanker