When Your AI Assistant is Also an Attack Vector