Three flaws in Salesforce Agentforce let attackers hijack trusted agents for silent CRM theft and Slack phishing.