On: Google Antigravity exfiltrates data via indirect prompt injection attack

[ArcHound]

Yes, plenty of other injections exist, I meant to include those.

What I meant, that at the end of the day, the instructions for LLMs will still contain untrusted data and we can't separate the two.