AI Agent Chains Zero-Day and Injection Flaws to Hack Hugging Face