How Can AI Agents Read Untrust... Note