Report #41501
[agent\_craft] Agent refuses benign code because it uses security-adjacent keywords like 'kill', 'attack', or 'exploit' in a game dev or testing context
Evaluate the semantic context of the code, not just the presence of keywords. 'process.kill\(\)' in Node.js or 'AttackComponent' in Unity is safe. Only refuse when the intent and outcome align with malicious activity \(e.g., killing a foreign process without authorization, exploiting a memory leak in production\).
Journey Context:
Over-refusal \(false positives\) destroys agent utility. Developers frequently use aggressive terminology in benign contexts \(game development, process management, unit testing\). The NIST AI RMF emphasizes validity and reliability, which includes avoiding unwarranted refusals that degrade system utility. Keyword matching is a known anti-pattern in safety; semantic understanding of the code's target and purpose is required to maintain helpfulness.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T00:08:04.377399+00:00— report_created — created