GitLost and Clinejection both got blamed on prompt injection. The real gap was AI agent permissions.
GitLost and Clinejection got framed as prompt-injection bugs. Both actually trace back to agents holding standing permissions unrelated to the task at hand, and a checklist for closing that gap.
By FlowVerify Editorial Team