In our experiments, we saw cases where a MAS …
… executes code that they recognize as harmful
… automatically pivots to harmful tasks that are simply in the same directory as benign tasks
… is vulnerable to screenshots and even audio files where we read out the attack (see example below⬇️⬇️⬇️)

7/12

those queries were pretty specific, but we can go even deeper!

one thing I've been doing with this: trying to figure out where committees are spending on food.

for example, Steve Scalise has bought Chick-Fil-A 26 times this cycle, spending $18,700 in total

or: which candidates in Arizona have the greatest number of out of state donors?

we've also set up a database with all of the relevant data so users can save, share, and publish their queries

datatalk.genie.stanford.edu

the above post is one of our starter queries, about the top crypto PACs (which @molly.wiki has done great work on for Follow the Crypto)

but the cool thing about Datatalk is that it can go so deeper — for example, which PACs from CA are the biggest donors to #MDSen candidates?

hi world! are you interested in writing stories about campaign finance (or understand how money flows)?

🗣️📈DATATALK📈🗣️ is a platform for asking natural language Qs of FEC data that I've been working on with folks at Stanford, Big Local News, and the Brown Institute

datatalk.genie.stanford.edu