A malicious AGENTS.md file in a Downloads folder tricked coding agents into installing a rogue package. Why instruction files are code now, what I’d ask engineering teams to change this week, and how Calendrz treats the emails its own agent reads.