Before You Let AI Agents Act, Know What They’re Running Cybersecurity Insiders