The Hidden Instructions That Can Hijack AI Agents