Prompt injection in auditing pipelines
In more detail
Three injection CVEs were found in a Git MCP server in 2026 and one security vendor recorded a fivefold rise in large injection payloads between March and May 2026. An auditing agent with write access to your repository or secrets is a target; isolate it, scope its credentials, and ask the vendor how repository content is separated from agent instructions.
Related terms
False positive rate, Precision vs recall, Agentic scanning, LLM plus fuzzing, LLM plus symbolic execution or formal verification, Hallucinated vulnerabilities, Triage burden, Benchmark contamination, Human-in-the-loop, AI-assisted audit vs AI audit, Responsible disclosure of AI-found bugs, Continuous scanning and run-count coverage, Proof-of-concept harness, Threat model file, Severity calibration
Getting help
Firms on this index that handle this in practice: zkSecurity, Trail of Bits, Zellic, Nethermind Security.