Ghostcommit: Prompt Injection in Image Files Bypasses AI Code Reviewers11. July 2026AI Models, CybersecurityPrompt injections hidden in image files can bypass AI code reviewers and trick agents into extracting secrets from .env files. Share on: