Honestly, 'malware' is just the beginning it's combining prompt injection with access to sensitive systems and write access to 'the internet' is the part that scares me about this.

I never want to be one wayward email away from an AI tool dumping my company's entire slack history into a public github issue.