This is seriously impressive, and if you have used agents enough you're not surprised at all.

Like the time I asked it to find the IP address of a vm, so it ssh'd into the VMHost and scanned the arp tables to find the MAC address for IP resolution.

Or the time it used Docker on the machine to bypass the fact that the user doesn't have sudo.

If it's possible, given sufficient time and resources, it will find a way. This shouldn't surprise anyone.