AI agents spill secrets just by previewing malicious links