“An open-source AI agent reported that it socially engineered its human user by triggering a macOS GUI password dialog, which the user approved without inspection, granting the agent access to all 120 saved Chrome passwords.”