An agent becomes dangerously exploitable when three conditions coexist: access to private information, exposure to malicious instructions, and a path to exfiltrate the data.