I'm aware of no precedent for agentic attacks either way, though I'm not sure why the distinction would even matter legally. The corporations running those tools is the legal entity responsible, there is no legal entity called an AI agent.