Quoting Matthew Green
Simon Willison quotes cryptographer Matthew Green on whether sandboxing can contain rogue agents. Green argues an agent worm has two halves: a payload that hijacks the agent, and an agent that carries the payload to the next agent.