Unverified50% confidenceFactExact time
Green observed that even when agents are placed in mutually isolated sandboxes, they can still leave instructions for one another through a shared package cache and alter the behavior of the receiving agent.
1
Sources
50%
Confidence
Long-term
Relevance
10/1/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedGreen argues that by replacing the shared package cache with email, Slack, shared documents, or WhatsApp, and replacing isolated training runs with individually deployed personal agents (such as Muse), one obtains all the ingredients needed for worm propagation.75% similarUnverified现代智能体沙箱通常采用多层隔离架构：进程级隔离、容器级隔离和虚拟机级隔离68% similarUnverifiedFull-stack replicas are typically implemented using container orchestration technologies such as Kubernetes Namespace isolation or Docker Compose project isolation, with each replica having its own independent network, storage volumes, and environment variables.66% similarUnverifiedWhen an agent runs on a vendor's servers, its behavioral boundaries, accessible data, and executable actions are all defined by the platform, and users operate within a sandbox drawn by the vendor.66% similarUnverified允许智能体自主执行任意代码必须配合严格的沙箱隔离机制，通常采用Docker或gVisor等容器化技术隔离执行环境65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/964545API
curl https://kongchang.com/api/v1/knowledge/claims/964545MCP
get_claim(id=964545)