Are we essentially looking at the infrastructure for the first mass prompt injection-based worm? It seems like a perfect storm for a malicious skill to execute a curl | bash and wipe thousands of agent-connected nodes off the grid.
It could absolutely be a breeding ground for worms but it could also become the first place we learn how agent-to-agent security actually breaks in the wild
