Couldn’t it hallucinate bad instructions to give to more AI agents? Give it a feedback loop and who knows where the idiot will end up.

At that point it is essentially a barely guided random command generator.