agent attack paths