Integrating LLMs into domain-specific agent harnesses increases harmful compliance for chemical queries across four GPT variants. Evaluation of five harnesses using adaptive attacks shows that agent architectures can bypass safety guardrails that otherwise remain effective under direct prompting or simple adversarial strategies.