Same flaw, opposite verdict: what counts as a vulnerability in AI agents? · HackerTrans