New Papers Map How Much Private Data Agents Leak Through Ordinary Tool Calls · Polylog