Prompt Injection and Excessive Agency: Securing AI Agents Before They Ship