AI Agents vs. Security: Coding Skills vs. Controls