Adversarial Code Obfuscation for Defending Against LLM-Based Analysis

I'm curious about ways to entice agents to perform weird and wacky things when working on a codebase.