Agents checkout + risk of prompt injection => big nop!

What is even the legal basis here? Can the agent sign contracts on your behalf? What if it is tricked by the vendor into signing for a monthly subscription you never wanted?