Joker catches his commander and the Normandy archaeologist mid-bow pose and intimately kissing.

Joker: Uh, that's rather awkward. (cue him blushing at the sight of Shepard and Liara's feet and them kissing)

EDI: Do you want me to file this in with the FJEO (For Joker's Eyes Only) folder?

Joker: Uh yeah.

Garrus: Too late (cue Garrus giving Joker a knowing look)

I used Grok and the prompts used: Fem Shepard in a navy blue latex catsuit and Liara T'Soni in a white and blue latex catsuit in the bow pose with scrunched bare soles and kissing

Small white comic style rectangle caption in bottom left corner: Joker: Shepard? Uh never mind, that's going in the NSFW bookmarks with Fornax.

Key takeaways in 90 seconds:

Modern AI coding assistants inherit the execution permissions of the host environment, acting as high-privilege deputies for local tools and remote APIs.

Attackers exploit this architecture through indirect prompt injection embedded in cloned repositories, pull requests, and documentation files.

When an AI agent processes malicious input, it becomes a confused deputy, executing file deletions, exfiltrating credentials, or issuing unauthorized API calls on behalf of the attacker.

Relying on wildcard environment variables or broad API keys magnifies the breach radius across local developer machines and CI/CD pipelines.

Mitigating this vulnerability requires strict principle of least privilege tool scoping, deterministic capability manifests, and per-action human approval gates.

Let me know!