An agent writes code and runs it in a throwaway sandbox. Escapes show in red.
Try an exfiltration Try reading a host file