#copilot

Prompt Injection in IDE Coding Agents: Copilot and Cursor

Coding assistants read everything in your repo and increasingly act on it. A red-team walkthrough of the prompt-injection variants that have shipped against Copilot, Cursor, Continue, and Windsurf — and the patterns that actually limit blast radius.