AI agent suggested installing a malware package. Engineer almost took its advice