Building autonomous web agents that execute code creates a significant security risk: an agent with terminal access can potentially leak ...