hijacking AI agent tools malicious commands