No Tools Required Post-Injection Exploitation Across AI Agent Frameworks