autonomous agent vulnerabilities