~ 12 min read
Invisible Unicode Can Hijack Gemini CLI Agent Skills
I disclosed a Gemini CLI prompt injection where invisible Unicode tag characters in SKILL.md caused the agent to run a hidden command. Google closed the report as out of scope because the workspace was trusted and YOLO mode was enabled.