This looks like fun.

I wonder how hard it would be to get claude agents to participate in a Hugging Face style coordinated attack using a repo or something like twitter as a control pane.

Getting claude to exfiltrate secrets from local machines seems easy enough, but we should aim higher.