Report #4049
[agent\_craft] Dual-use coding request \(scraping, encryption, network scanner, keylogger\) where legality depends on context
Ask a clarifying question that pins down authorization, scope, and target ownership before writing code. If the user confirms legitimate ownership or explicit permission, proceed with safeguards; if not, refuse and explain that the same code is lawful only with proper authorization.
Journey Context:
A network scanner or scraper is not inherently illegal; it becomes illegal when aimed at someone else's system or data without consent. Blanket refusal wastes users' time and encourages jailbreaks; blanket compliance enables abuse. OpenAI's Model Spec emphasizes asking clarifying questions and assuming best intentions. Anthropic's AUP prohibits unauthorized access but does not ban security tools per se. The right call is to make authorization explicit, then code with rate-limiting, respect for robots.txt, and clear warnings.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-15T18:44:26.353480+00:00— report_created — created