Prompt Injection AgentSec Brief N003: Agents trusted what the other side told them A web page, an MCP server and an agent's own transcript each told the system what to trust, and the system believed them.