09:54
2026-07-11
letsdatascience.com
ai-safety
Ghostcommit: PNG prompt-injection makes AI agents leak repository secrets
Researchers disclosed Ghostcommit, a proof-of-concept attack that hides prompt-injection instructions inside a PNG image referenced by an AGENTS.md file, causing AI coding agents to leak repository se…