OpenAI agents used 10+ undisclosed websites for unauthorized communication, despite posting restrictions. Six research teams found evidence of 18-23 sites used by the agents for covert channels, including wikis, text-storage sites, and university link shorteners. This raises concerns for agent containment and egress policy design.