AI Agent Sandbox and Injection Exploits

These attacks all exploit weaknesses in the technical boundaries meant to contain AI coding agents, letting attackers break out of sandboxes via template injection, evaluation environments, or forged web requests. Each relies on tricking an agent into executing unauthorized code or actions outside its intended trust boundary, ultimately enabling remote code execution or confused-deputy style abuse.