Prompt injection
Prompt injection
Posted Aug 5, 2026 21:49 UTC (Wed) by marcH (subscriber, #57642)In reply to: Prompt injection by dbnichol
Parent article: An LLM agent attempts to compromise a project on GitHub
Thanks for the evidence!
> Those are both within HTML comments in github PR comments, so they don't show up on the web page.
Is that the reason why an agent followed these prompts? Only because they were hidden HTML, which fooled a human operator into asking their agent to process them? This would have been caught and prevented if not hidden?
In that case some (manual, human) security check was broken and then I guess you could call this "injection".
Designing the fix is obvious: make sure to show ALL the data that will feed the AI at human approval time. Dunno about the implementation details.