An open agent-security benchmark, including the attacks we fail to catch