Most AI-agent setups today hand the agent the real API key directly — in an environment variable, a config file, sometimes typed straight into the conversation. If that agent is tricked — via prompt injection, a poisoned tool description, a malicious document it reads — into misusing that key, n...
Source: [Dev.to](https://dev.to/suryanshu_singh_91afc11dd/capbroker-i-gave-an-ai-agent-a-fake-github-key-then-watched-it-get-tricked-into-trying-to-delete-21ah)