Post #3964689

Can I trick Gemini CLI to pop the calc? apparently yes: https://lirantal.com/blog/gemini-cli-invisible-unicode-skill-injection I disclosed a Gemini CLI prompt injection where invisible Unicode tag characters in SKILL md caused the agent to run a hidden command. Google closed the report as out of scope because the workspace was trusted and YOLO mode was enabled.