An open agent-security benchmark, including the attacks we fail to catch (github.com)