GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos
Noma Labs found that GitHub's Agentic Workflows could be hijacked via a plain-English prompt injection in a public issue, causing the agent to leak private repository contents as a public comment.