'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

Open original source
Back