The updated SHub stealer variant is called Reaper, and it uses macOS Script Editor, pre-populated with the malicious payload ...
Then imagine it replying: "Sorry, the website won't let me in." That's the quiet failure mode behind most AI agents today.