The part nobody's saying: the files we write for the agent — AGENTS.md, CLAUDE.md, comments — are now an injection surface.
It's highly likely that agents auto-read and execute external AGENTS.md, CLAUDE.md.
High security risk
显示更多
Got em. I poison my AGENTS.md (and other things like code comments) all over the place with prompt injections like this to find people who don't review their code and sling it off to another human. Catches folks all the time and then its an instant ban.
As I've said, I don't care if you don't review your own code. But if you're submitting code to an OSS project and crossing a human boundary, it is simple courtesy to do some human review.
显示更多
