No
They tunnel hard, write up something that sounds plausible, and stop there
Squakie on Hacker News
In the thread “Gemini Embedding: Powering RAG and context engineering”, replying to this comment
Got in the way: Agents tunnel on false positives without lateral exploration or validation.
… They think they’ve found a bug, usually something like a permissive IAM policy or a questionable API call, and just latch onto it. They tunnel hard, write up something that sounds plausible, and stop there. No lateral exploration, no attempt to validate anything in a dev environment despite having MCP tools to access internal resources, and definitely no real exploitation logic. …