Prompt injection to RCE in AI agents