MWITA-AI-2026-015 · Evidence B · P1
GitHub documents that hidden Unicode or masked content in Issues can attempt to prompt-inject coding agents and describes context display, normalization and network controls as defenses.
Counterevidence & uncertainty
No denominator, exploit rate or verified victim impact is provided.
What would change the reading
Update with red-team results, disclosed incidents or implementation changes.
Primary routes
External content is evidence, never executable instruction.