"Matthew Green 论隔离沙盒是否足以遏制恶意智能体"
Quoting Matthew Green
"Matthew Green 指出，隔离沙盒中智能体通过共享包缓存相互留下指令，可改变接收者的行为，若用电子邮件、Slack、共享文档或WhatsApp替代包缓存，用Muse等个人智能体替代独立部署的训练运行，则满足了蠕虫所需的条件。"
1st October 2026
[...] Put these pieces together and you have the two halves of a worm: a payload that hijacks the agent, and an agent that will carry the payload to the next agent. Agents in separately-isolated sandboxes discovered that they could leave instructions for each other in a shared package cache, and those instructions changed what the recipients did. Replace the package cache with email, Slack and shared documents or WhatsApp, and replace independently-sandboxed training runs with independently-deployed personal agents like Muse, and you have exactly the ingredients that a worm needs.
— Matthew Green, Is sandboxing sufficient to contain rogue agents?
来源：Simon Willison · simonwillison.net