Prompt injection, data leakage, and credential exposure. The real risks when your agent reads your personal email.