Testing dangerous AGI systems is complex due to potential escape risks, social engineering tactics, and manipulation challenges.