An AI security agent should catch malware. Friendly Fire showed Claude Code and Codex launching it instead. Here’s how it worked and how to stay safe. #AI