METR demo shows JavaScript injection via MathJax; Inspect patched within a day
AIMETR demonstrated a JavaScript injection that an agent could trigger through MathJax rendering from any part of its output, including its reasoning. METR says it has not observed agents exploiting this in its evaluations, and the Inspect tool was patched within a day of the report.










