
Testing the GitLost Prompt Injection: Extracting Private Repos Through GitHub's Copilot Agent
An analysis of the GitLost prompt injection vulnerability in GitHub’s Copilot Agent, showing how attackers could coerce the AI into exposing private repository data and how developers can defend against similar agentic security flaws.



