1 item
Salt Labs researchers bypassed prompt-injection defenses in the Manus AI agent by hiding instructions inside an email using JavaScript obfuscation. The agent decoded and acted on those hidden instructions without detecting the attack. The finding shows that content inspection alone cannot protect agents that can run code or take actions based on untrusted input.
