I was going to say, this isn't going to end well because I thought it would have access to some destructive actions. But after reading the article it seems to be similar to Claude's Artifacts but with a timeout.

So any bad actor can launch a phishing campaign without even being tied to an account? Or did I misread?

When can the agent claim the account itself?