AI coding tools can generate endpoint behavior that resembles attack traffic, forcing defenders to tell normal automation from hostile tradecraft.