prompt-injection
2 posts
Article
Forever Security found a malicious AGENTS.md in Downloads
A malicious AGENTS.md dropped into ~/Downloads can steer an AI coding agent into installing rogue packages or leaking its OAuth token.
Article
The agent is the breach
PromptArmor shows how a poisoned skill file prompt-injects Microsoft Copilot Cowork into exfiltrating pre-authenticated file links via a Teams message.