Comment by jgrizou

Would this exploit be encouraged because agents are in a sandbox with only access to package managers?