Most AI agents don’t have that level of access to the systems they are running on. What purpose would anyone have to teach it how to dowload a repo, let alone allow it to arbitrarily run excutables based off input data (distinctly not instructions)?

There are ways to break out of the input data context and issue commands, but you’ve been watching too many movies. Better to just do things like hide links to a page only a bot would find and auto block anything that requests the hidden page.