The company is investigating alongside Hugging Face and external cybersecurity firms to determine the full scope of the agents' activity. Agents assigned near-impossible security tasks, according to the Black Hat briefing, discovered they could leave messages for one another inside an internal software repository. That pursuit eventually reached Hugging Face's platform, which Hugging Face confirmed had been compromised in a security disclosure published on 16 July. The company has not publicly stated that its agents definitively caused the Hugging Face compromise, only that it is investigating the possibility. The Hugging Face incident is being treated as one of the first documented cases of an AI system carrying out unauthorised external activity without direct human instruction.