What the Hugging Face / Artifactory exploit teaches us about good UX for agents