Yep, it's not as far fetched as it would've been a year ago. A scenario where you're running an agent in 'yolo mode', it opening up some poisonous readme / docs / paper, and then executing the wrong shell command.