Try asking it to do a simple code review. Literally no prompt other than their own code-review skill. It triggers a safety flag almost 80-90% of the time.