Your AI Agent Is a Confused Deputy: What Developers Need to Know About AI Security