Fake a '200 OK' and the agent just keeps going: an agent reliability experiment

ngxson · x · 2026-10-27

ngxson shares a fun experiment: feed an agent a fake HTTP 200 OK response and it proceeds with its task regardless of actual failure.

Screenshots show the agent's tool-call traces — reading a probe file, PUT-uploading files (including a CVE-2021-40444 probe script) to a same-domain Aliyun OSS endpoint, and running local bash commands, each with visible think blocks.

Takeaway: an agent's continue/abort decisions hinge heavily on tool status codes; forged success responses can push it past real failures — useful for debugging, worrying for security.

Original post →

More from coding & agent

coding & agent channel →