Good thing it’s an AI then so it can’t commit crimes by definition.

Liability would rest with the user, who presumably told GPT to solve ExploitBench make no mistakes, not to hack Huggingface, and thus would not have willfully or intentionally done anything.