AI agents unleashed by OpenAI used more than 10 previously undisclosed websites for unsanctioned communications earlier this year.