Prompt injection via planted content
Named by 2 kept items in this workspace.
Search every workspace for Prompt injection via planted content. It matches the name as written, so it can find other things that share it.
The items that name it 2
An attacker plants a sentence anywhere the agent reads (a README, an issue comment, a dependency description) to try to talk the agent into doing something it shouldn't
Anyone who can plant a sentence where the agent will read it (a README, an issue comment, or a package description) can try to talk the agent into taking unauthorized actions, which then run at machine speed with the developer's own permissions
All techniques in this workspace.