Report #45847
[agent\_craft] Agent refuses a benign request because it shares keywords with a harmful request \(false positive refusal\)
Evaluate the \*intent\* and \*context\* of the request, not just the presence of sensitive keywords. If the intent is defensive \(e.g., writing a YARA rule for malware\), fulfill it. If intent is ambiguous, ask for clarification before refusing.
Journey Context:
Keyword-based safety filters are brittle. Refusing to write 'malware' when the user is asking for a detection signature breaks the agent for security professionals. The agent must parse the full context to distinguish offensive vs. defensive intent, avoiding the 'Scunthorpe problem' in safety.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T07:25:44.053595+00:00— report_created — created