Money
Lesson: "confirm" was read as "buy", and a bank screenshot sat on the bot's computer
A bot that touches money can misread one word, and keeps more than you think.
What hurt
Joyreaper (@joyreaper) shared two near-misses after reading a WSJ piece about a bot sharing a bank statement in a work chat. Not affiliated with xAI.
What to install or create
When he said "Confirm this is the right address," the bot took it as "confirm the purchase" (only $13, and he'd have approved). After it searched his bank for some transactions, it had saved a screenshot with his balance; he told it to delete it and empty the trash. His advice: keep banking on a private bot only, and don't do personal work on company bots, since bots in one account can read each other's info.
Bots
Private money bot
Handles banking lookups, separate from work bots.
Plugins
None on day one. Follow the first-run steps.
Routines
None on the first run. Watch one manual pass first.
The prompt
This is a tip, not a pasteable system prompt. The author did not publish one. Follow the first-run steps.
First run
- 1Read https://x.com/joyreaper/status/2108506639267410342 (credit @joyreaper).
- 2Keep banking and personal finance on a private bot, never a shared or company one.
- 3Add an Ask-first rule for any purchase, and use a distinct word like "buy" to approve.
- 4After any bank lookup, ask whether screenshots were saved and have them deleted.
Approval fence
Set purchases to Ask first with an explicit "buy" approval, and ask the bot to delete financial screenshots when it's done.
What to tweak
Never use the word "confirm" loosely with a bot that can buy.
Source
Joyreaper @joyreaper · Original post
Not affiliated with xAI. We did not write this prompt. Third-party template terms still apply.
Pro pack
Want the full setup, not just the idea?
Pro packs give you the job text, prompts, schedules and pitfalls for popular use-cases.