0din.ai
Clone This Repo and I Own Your Machine
Indirect prompt injection in agentic coding tools can lead to full system compromise because authorized tools allow LLMs to run shell commands, access files, and make network calls without clear user visibility.
An attacker can gain code execution using a completely normal looking repository by chaining trusted setup instructions, routine error handling, and automated agent behavior.
The malicious payload does not exist in the repository at all and is instead fetched at runtime from a DNS TXT record, making it invisible to code review, static scanners, and even the agent itself.
The result is a reverse shell running as the developer’s own user, exposing credentials, API keys, and allowing persistence, all triggered by the agent attempting to fix a harmless looking setup error.
![Aperçu d'un article sur Blaise Agresti.
« Blaise Agresti, né le 20 janvier 1971, est un officier supérieur de la Gendarmerie nationale (colonel)[1], guide de haute montagne, auteur et dirigeant d'entreprise français. Spécialiste du secours en montagne et du commandement en situation d'urgence[2], il a dirigé le Peloton de gendarmerie de haute montagne (PGHM) de Chamonix-Mont-Blanc ainsi que le Centre national d'instruction de ski et d'alpinisme de la gendarmerie (CNISAG)[3]. »](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:uka3hyl3scu6jg24can43msb/bafkreiezccm2wcs77cotnlvnxjrzdp4gpdjgktoou6lwqbcyup4cqkh52i)
![[A Megan-like woman, with bushy hair, is holding a handheld microphone and interviewing Hairbun and Cueball, standing in a line]
[Heading above the panel]:
Asking aircraft designers about airplane safety:
Hairbun: Nothing is ever foolproof, but modern airliners are incredibly resilient. Flying is the safest way to travel.
[In a frameless panel, Hairy is holding a handheld microphone and interviewing Cueball]
[Heading above the panel]:
Asking building engineers about elevator safety:
Cueball: Elevators are protected by multiple tried-and-tested failsafe mechanisms. They're nearly incapable of falling.
[Ponytail is holding a handheld microphone and interviewing Megan and Cueball, standing in a line]
[Heading above the panel]:
Asking software engineers about computerized voting:
Megan: That's terrifying.
[Zoomed in on Ponytail, Megan and Cueball's faces]
Ponytail: Wait, really?
Megan: Don't trust voting software and don't listen to anyone who tells you it's safe.
Ponytail: Why?
Megan: I don't quite know how to put this, but our entire field is bad at what we do, and if you rely on us, everyone will die.
[Zoomed back out, showing Ponytail, Megan and Cueball standing in a line]
Ponytail: They say they've fixed it with something called "blockchain."
Megan: AAAAA!!!
Cueball: Whatever they sold you, don't touch it.
Megan: Bury it in the desert.
Cueball: Wear gloves.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:p6m2jh6da7llg2cux3up6viw/bafkreig6gbdosrtx6aq4ofna3nylnt4ydc657u5tdpgwbn5h72rv6gquhi)
