Data MonstersA field guide

The bestiary · The Shadow Agent

The Shadow Agent avatar

Specimen · catalogued monster

The Shadow Agent

Someone's personal agent, running with production credentials

0Data teams haunted

12 of 20On the leaderboard

Born one bored afternoon in a browser tab, this helpful little spirit learned to open doors nobody meant it to open. It works tirelessly, keeps no diary and answers to no one, which it considers a feature.

Symptoms

  • Agents and automations built outside IT
  • Personal or shared credentials wired to production
  • Company data pasted into public AI tools
  • No inventory of what AI runs where
  • Actions nobody logged or approved

Weakness

Bring it into the light: an inventory of agents, a sanctioned platform with scoped, short-lived credentials and full logging, and a fast lane that approves the useful ones instead of driving them underground.

Overheard in the corridor

  • “I just built a little agent to save time.”
  • “It uses my login, so it's fine.”
  • “We have no idea how many GPTs people have built.”
  • “IT found out when it broke something.”