Prompt Flow Integrity to Prevent Privilege Escalation in LLM Agents