Researchers exploit OpenAI's Atlas by disguising prompts as URLs