I'm thinking of installing the extension in a sandbox and then use a local agent to have endless fake conversations with it

“There’s too much human harmful code to review and too few human reviewers.”

“I know, let’s have an AI do all the work for us instead. Let’s take a coffee break.”

No way that could backfire... Prompt injection is a solved problem right?