Agent data injection forges trusted fields across six AI models, redirecting web and coding agents while bypassing prompt ...