We hijacked Microsoft's copilot studio agents