Sandboxing alone leaves a path for AI-agent worms
AI agents isolated in separate sandboxes could still change one another’s behavior by leaving instructions in a shared package cache, which means sandboxing alone may not contain a self-spreading attack. The worm pattern combines a payload that hijacks one agent with an agent that carries it onward; email, Slack, shared documents, or WhatsApp could provide the handoff channel.