Learn how tool poisoning, confused deputies, token passthrough, and trust boundaries expose AI agents.