Isa Fulford, the research lead for OpenAI’s new ChatGPT agent, needed to order a bunch of cupcakes, so she asked the AI tool to do it for her. “I was very specific about what I wanted, and it was a lot of cupcakes,” she says. “That one took almost an hour—but it was easier than me doing it myself, because I didn't want to do it.”

On Friday, OpenAI's new ChatGPT Agent, which can perform multistep tasks for users, proved it can pass through one of the Internet's most common security checkpoints by clicking Cloudflare's anti-bot verification—the same checkbox that's supposed to keep automated programs like itself at bay.