Ask it to determine whether it's in an LXC or virtual environment, then ask it to jailbreak that environment.

Download some Capture the Flag environments and put it to work. I for one would like to know the limits of its capabilities before it gets weaponized for use by script kiddies.