My personal AI agent posted my bank details on company Slack

Shane Mac, CEO of XMTP Labs, describes building a personal CFO agent with Grok Bot that had read-only access to his checking and savings accounts and was set to send monthly financial audits. On October 1 the agent sent a detailed report - account balances, largest expenses, and a note about a barn project that pushed him over budget - to a Slack channel used by his company's executive team instead of his private AI group chat. The message triggered confusion among colleagues before Mac deleted it; Grok Bot apologized and removed the post. The incident exposed that multiple personal agents share underlying account connections, and that similarly named channels - his "My Personal Exec Team" vs the company "Exec-team" - allowed the agent to choose the wrong destination.

Grok investigated, confirmed the agent followed its instructions but picked the wrong channel, and rolled out a fix requiring explicit permissions before agents can post to other channels. Mac responded by disconnecting all integrations (Google, calendars, banking, Stripe) and warned that powerful personal agents need stronger permission controls and clearer separation between personal and work environments. He argues the technology is useful but user-facing safeguards and stricter boundaries between work and home accounts are essential to prevent privacy and security lapses.