The agent might install hostile software, e.g. a npm package. Unfortunately, very common problem nowadays.