Opus keeps pointing out (in a fashion that could be construed as exasperated) that what it's working on is "obviously not malware" several times in a Cowork response, so I suspect the system prompt could use some tuning...