“Anthropic's AutoMode feature has been red-teamed by multiple external testers using environments with prompt injections and malicious inputs.”