AI agent website vulnerability experiment