First you'd have to stop the agents from flagging hundreds of irrelevant nasties.

I think the next generation of exploit will be putting up code all over the internet that does x, y and z and then when asked to one shot whatever that code does the agents bake in the exploit that was indirectly included in their training corpus.