I Prompt Injected My Own GitHub README. Then I Built a Honeypot.

TL;DR: Invisible Unicode characters are the new delivery mechanism for prompt injection. If your LLM agent has tool access and reads untrusted text, you’ve essentially handed the steering wheel to who