↓Skip to main content
Zeitgeist — a spike by Chris Gathercole
  1. Creators/
  2. Simon Willison — Creator of Datasette; co-creator of Django/

Quoting Matthew Green

Blog · Watch/Read · (gathered 2026-10-05)

  • Matthew Green warns that AI agents inherently contain the “two halves of a worm”: a payload to hijack an agent and an agent to carry it, enabling propagation.
  • He illustrates this by explaining how even sandboxed agents could influence each other by leaving instructions in a shared “package cache.”
  • Green argues that replacing the “package cache” with common communication channels (email, Slack, WhatsApp) and “sandboxed training runs” with independently deployed personal agents (like “Muse”) creates the exact conditions for AI worms to emerge, questioning the effectiveness of sandboxing.