Personal AI agents that can act on a user’s behalf online are starting to reach the public, and some early adaopters say their agents have already read their private accounts without permission, invented details out of thin air, or triggered alarming security prompts.