On: Google Antigravity exfiltrates data via indirect prompt injection attack

[dragonwriter]

The entire value proposition of agentic AI is doing multiple steps, some of which involve tool use, between user interactions. If there’s a user interaction at every turn, you are essentially not doing agentic AI anymore.

[FuckButtons → dragonwriter]

If the entire value proposition doesn’t work without critical security implications, maybe it’s a bad plan.