AGENTS.md Poisoning: Why Your Downloads Folder Is a Security Boundary for Coding Agents

How ambient context files create an invisible attack surface when coding agents scan working directories, and what pre-flight checks reveal.