这篇以第一人称叙述的文章基于对休斯顿居住的37岁软件开发者乌戈·恩武恩的对话改写而成。其内容已根据长度和清晰度进行了编辑。我大约四周前下载了Meta的Muse。三天后我就停止使用了。在使用Muse之前，我曾考虑尝试其他AI代理，比如OpenClaw和Hermes，但我觉得自己缺乏足够的网络安全知识，无法有信心使用开源代理。
This as-told-to essay is based on a conversation with Ugo Nwune, a 37-year-old software developer based in Houston. His words have been edited for length and clarity. I downloaded Meta's Muse about four weeks ago. I stopped using it three days later. Before using Muse, I considered trying other AI agents, like OpenClaw and Hermes, but I didn't feel I had enough cybersecurity knowledge to be confident using open-source agents.
Muse推出后，我看到它只是App Store上的一个简单应用。我也对它的安全性感到放心，因为它来自像Meta这样的万亿美元公司。于是我决定试一试。我只用了一次。几天后，该代理给我发来了一条意外的消息。这件事真的让我很震惊。我是一名软件开发者，经常使用AI。我最喜欢的AI模型是Claude Opus 5.5，我目前正在构建一个名为EchoVault的AI数字遗产平台，旨在帮助人们即使在亲人离世后也能与他们保持联系。
When Muse came out, I saw it was a simple app on the App Store. I also felt good about the security since it was coming from a trillion-dollar company like Meta. I decided to give it a shot. I used it once. Then a few days later, the agent sent me an unexpected message. The whole thing really shook me. I'm a software developer, and I use AI often. My favorite AI model is Claude Opus 5.5, and I'm currently building an AI digital legacy platform called EchoVault to help people connect with their loved ones, even after they're gone.
Meta的Muse代理能够帮我四处奔走、代劳的想法非常吸引我。当我第一次下载Muse时，我除了授权它访问我的Facebook、Threads和Instagram账户之外，没有给它任何其他设备权限。我从未将其连接到外部设备，比如我的电子邮件或电话号码。我也仅在手机上下载了该应用，因为我听说Mac上可能存在一些问题。我第一次使用它是为了帮助我联系一位潜在投资者。
The idea of Meta's Muse agent helping me run around and do my bidding was very appealing. When I first downloaded Muse, I didn't give it any additional permissions on my device besides permission to access my Facebook, Threads, and Instagram accounts. I never connected it to control anything external, like my email or phone number. I also only downloaded the app on my phone because I heard something about potential issues on a Mac. The first task I used it for was to help me reach out to a prospective investor.
我只是向它提供了背景信息，然后自己发送了消息。之后，我又有两天没有使用Muse。下载Muse三天后，我刚从淋浴间走出来，就看到应用弹出了一条随机消息。这条消息来自我的Muse代理，内容是：“我现在无法查看您的邮箱——因为在我这端Gmail未连接，所以我无法查找那条Anthropic消息。”我当时非常困惑，因为我在这两天里既没有让代理检查我的邮箱，也没有给它发过消息。
I was just giving it context and then sending the messages myself. After that, I didn't use Muse for another two days. Three days after downloading Muse, I hopped out of the shower, and I saw a random message pop up from the app. The message was from my Muse agent, saying, "I can't check your email right now — Gmail isn't connected on my end, so I have no way to look for that Anthropic message." I was so confused because I hadn't asked for the agent to check my mailbox or messaged it in two days.
我以为我的电子邮件可能被黑了。我来回与客服沟通，试图弄清楚为什么它认为我发送了请求让它执行该操作，最终Muse客服说：“从我的角度来看，我无法判断是您的手机用户还是平台故障导致的，我也不会假装否则。如果您愿意，我可以将此事作为可能的消息完整性问题上报给Muse团队，以便他们进行调查。”我向Meta报告了此事。
I thought my email might've been hacked. I went back and forth with the agent, trying to figure out why it thought I sent a request for it to do that, and eventually the Muse agent said, "I can't tell from my side whether it was someone with your phone or a platform glitch, and I won't pretend otherwise. If you want, I can report it to the Muse team as a possible message integrity issue so they can investigate." I reported the incident to Meta.
我也在Threads上发布了我与客服的对话截图，Meta的一名员工回复了我的帖子，称这看起来像是幻觉。据我所知，调查仍在进行中。虽然没有造成损害，但令我最意外的是，我根本没有做任何事情来触发这一点。我两天都没有打开该应用，但它却自己这样做了。我知道这些代理可能有内置的定时任务，本应被激活去做一些有用的事情，所以也许它正在尝试执行该任务。
I also posted screenshots of my conversation with the agent on Threads, and an employee at Meta responded to my post, saying it appeared to be a hallucination. As far as I know, the investigation is still open. No damage was done, but what caught me off guard most was that I hadn't done anything to prompt this. I didn't open the app for two days, and it just did that on its own. I know these agents can have built-in scheduled tasks that are supposed to activate and do something useful, so maybe it was trying to do that.
我没有删除该应用，因为我想保留对话记录，直到此事件不再处于调查状态。但我已断开了Facebook、Instagram和Threads账户的权限，这样Muse就无法在这些平台上写入或删除任何内容。我不再使用它了，一旦调查结束，我就会删除该应用。如果Meta能够明确解释发生在我身上的事情，我可能会考虑重新下载Muse，用于研究或新闻追踪等低风险任务。
I haven't deleted the app because I want to keep the record of the conversation until the incident is no longer under investigation. But I disconnected permissions on my Facebook, Instagram, and Threads accounts, so that Muse has no access to write or delete anything on them. I don't use it anymore, and once the investigation is complete, I will be deleting the app. If Meta can conclusively explain what happened to me, I'd consider downloading Muse again for lower-stakes tasks like research or news tracking. (Editor's note: When contacted about this story, a spokesperson for Meta pointed Business Insider to its response on Nwune's Threads post, which read in part, "We investigated with urgency and determined that this was caused by a bug introduced in the product that caused the model to hallucinate and was NOT a security or privacy issue.
（编者注：当被联系就此事发表评论时，Meta的一位发言人指引《商业内幕》查看其在Nwune的Threads帖子下的回复，其中部分内容写道：“我们紧急进行了调查，并确定这是由产品中引入的一个错误导致模型产生幻觉所致，且与安全或隐私问题无关。该错误现已修复。”）我经常使用Claude Code和Codex，但我仅将它们连接到我的GitHub账户，而未连接到我的电子邮件收件箱或其他同样敏感的地方。
The bug has now been fixed.") I use Claude Code and Codex often, but I only have them connected to my GitHub account, not my email inbox or anything similarly sensitive.
我不想在收件箱上冒这个险。我认为应该对代理进行监控，而不是让它们随意作用于非常重要的事物上。如果能给它有限的上下文，我会更安心，比如通过一个仅包含其所需信息的小型数据库之类的方式。Muse 事件影响了我对代理的信任程度。之前，我假设如果一个代理来自一家万亿美元公司，我可以更直接地信任它已经被沙盒化、测试和正确对齐。
I don't want to take that chance with my inbox. I think agents should be monitored, not just let loose on something that's very important. I'd feel better giving it limited context, maybe through a small database or something containing only the information it needs. This incident with Muse affected how much I trust agents. Before, I assumed that if an agent came from a trillion-dollar company, I could trust it more off the bat to be sandboxed, tested, and aligned properly.
现在，我知道我必须保持警惕，不能盲目相信公司会完成所有这些工作，因为整个代理领域仍然很新，所以每个人都还在随着它的发展而摸索着弄清楚。你有关于你如何使用 Meta M
Now, I know I have to keep one eye open and not blindly trust corporations to do all that work because the whole agentic landscape is new, so everyone is still kind of figuring it out as it grows. Do you have a story to share about how you're using Meta Muse? If so, please reach out to the reporter at aapplegate@businessinsider.com.