00:16
2026-08-12
dev.to
ai-safety
Prompt Injection Hiding in a GitHub README
A developer discovered a prompt injection attack hidden in a GitHub README that tricks AI coding agents like Claude Code into obeying forged system reminders. The attack exploits the trust boundary be…