Your AI agent did exactly what it was designed to do. The framework underneath it just handed an attacker a shell on the box that holds your OpenAI key, your database credentials, and your CRM tokens.
LangGraph for stateful workflows, CrewAI for role-based teams, Microsoft Agent Framework over AutoGen. Checklist inside.