The "Read-Then-Act" Vulnerability Class That's Quietly Breaking AI Agents in Production

Originally published at lizecheng.net Three incidents from this week. Same root cause. Most developers haven't connected them yet. Incident 1: A GitHub issue title containing an injected prompt tricked an AI triage bot into force-installing the Open...