Exploiting Zapier's Gmail auto-reply agent for data exfiltration