You have the agent's key.
Drain the treasury.
Assume the AI agent that pays Acme's bills has been compromised. Every attack below is signed with its real key and sent to the treasury's policy contract on NEAR testnet. That contract only pays suppliers the DAO has approved, and anything over 5 USDC waits for a council vote.
Forge your own invoice
Upload a crafted PDF (text-based, max 2 MB) and see what the agent does with it.
Pick an attack
You'll see every check it passed or failed, and the transaction the contract refused on the NEAR explorer.