Even though I only passed a GitHub issue URL and asked it to 'fix this,' the agent executed a line hidden in the issue body ...