Noma Labs details GitLost, a prompt injection flaw that made GitHub’s AI agent expose private repo data through a crafted public issue and guardrail failures.
First seen on hackread.com
Jump to article: hackread.com/gitlost-github-ai-agent-leaking-repository-data/
![]()

