Anthropic’s browser agent got hijacked 31.5% of the time before safeguards engaged