Analysis of published research
Prompt injection in a development agent: the VS Code attack chain as a system problem
The weakness does not reside in a single prompt. It emerges when untrusted content, powerful tools, local secrets and outbound communication are connected without end-to-end trust boundaries.