AI agent lethal trifecta: private data, untrusted content, exfiltration vectorssimonwillison.net7 pointssimonwa year ago