AI coding agents are safest when you assume they will eventually run the wrong command, install the wrong package, or follow a malicious instruction...