PLUS ULTRA Attack Methods Used by Gemini and Behavioral Differences with Other Models: Autonomous Risks of AI Agents Beyond Misconfigurations