Agents promise hands-free convenience, but at a cost, and can sometimes take actions the user never authorized them to take