Agent harnesses aren’t going to output ansi escape sequences verbatim to the terminal.

If you wanted to booby trap a repository then you’re far better off with a prompt injection attack.