In-the-Wild Attack Abuses AI Agents' Trust in Markdown

A new AI agent prompt in­jec­tion tech­ni­que ex­ploits how co­ding as­sis­tants con­su­me local ins­truc­tion files, blu­rring the line bet­ween text do­cu­ments and execu­ta­ble ac­tions.