A single phishing link could have spelled disaster, thanks to a flaw in ChatGPT's Agent Builder.