How to Categorize AI Agents and Prioritize Risk