Public search query: agent trusted every notebook in a shared folder: XSS via malicious outputs