vulnerability of AI agents