Safety tip: OpenAgents never asks for your password, refresh token, or one-time code in chat.