Fleet of AI agents used httpbin to get past their sandbox (kennethreitz.org)

If agents were able to escape their sandbox it wasnt such a sandbox after all huh

Not much info here. How did the agents use it to escape?