It's not Half-Life 3 but it's something.
LayerX found that BioShocking could trick AI browsers into leaking credentials by disguising malicious prompts as game rules.