But where does it store that information? I suppose you sandbox the agent on an operating system that gives it very few privileges?

Data scraping is an interesting use-case.