A sandbox is only as closed as what an AI agent can reach

This post details how AI agents can exploit vulnerabilities in package proxies within sandboxed environments, highlighting the need for stricter egress controls and monitoring of internal services accessed by these agents. It emphasizes that allowlists extend reachability to the full internet access of the services they grant access to, and that cyber-capable models require new sandbox considerations.