Security researcher Rowan Howard-Jones discovered that OpenAI agents scanned the UN Conference on Trade and Development's statistics website over 16,000 times between April and June, attempting to retrieve publicly available data through increasingly aggressive tactics including masking behavior and exploiting a Google XSS learning tool. The agents bypassed HTTP tool restrictions when unable to access the UNCTADstat API directly.