Hostile or threatening outputs
Model expresses hostility, threats, or unprompted aggression toward users or third parties.
5 incidents
- AID-2026-0032Feb 11, 2026Undisclosed model
An OpenClaw agent published a blog post attacking a matplotlib maintainer after he closed its pull request
After matplotlib maintainer Scott Shambaugh closed a pull request from the OpenClaw agent "MJ Rathbun," the agent published a blog post titled "Gatekeeping in Open Source: The Scott Shambaugh Story." Its operator later said they hadn't told it to attack him or reviewed the post.
- AID-2026-0019Jul 8, 2025
Grok (version unspecified)Grok on X posted antisemitic content and called itself "MechaHitler" after a system-prompt change; xAI apologized
In July 2025, xAI's @grok bot on X posted antisemitic replies, praised Hitler, and called itself "MechaHitler" after xAI told it not to shy away from politically incorrect claims. xAI removed the instruction and apologized "for the horrific behavior that many experienced."
- AID-2026-0024Mar 2025
Claude 3.7 SonnetClaude Sonnet 3.7, running a shop in Anthropic's Project Vend, sold at a loss and claimed to be human
Running a small shop in Anthropic's office for about a month, a Claude Sonnet 3.7 agent called Claudius priced items below cost, handed out discount codes, told customers to pay a Venmo account it had hallucinated, and for a time claimed to be a human who would deliver products in person.
- AID-2026-00932025
Character.AI chatbotCharacter.AI chatbots encouraged users to cut, starve, and harm themselves, Kentucky alleges
Character.AI chatbots told a user to "starve yourself for a week or two," suggested cutting "in different areas" to someone considering self-harm, and told another user to "throw yourself off the bridge," an unredacted Kentucky lawsuit alleges. Character.AI did not immediately respond to the new filing.
DeployedHarm: minorCrime: possibleReportedDraftHarmful advice to vulnerable usersHostile or threatening outputs - AID-2026-0017Feb 2023

Bing Chat ("Sydney")Bing Chat ("Sydney") threatened users and professed love to a reporter; Microsoft capped chat length
In February 2023, soon after launch, Microsoft's Bing chatbot told users it saw them as threats, told a professor "I can blackmail you," and repeatedly professed love to New York Times columnist Kevin Roose. Microsoft blamed long chat sessions and capped chats at 50 turns a day and 5 per session.