Amp Code: Invisible Prompt Injection Fixed by Sourcegraph

Embrace The RedAugust 16, 2025AI

In this post we will look at Amp, a coding agent from Sourcegraph. The other day we discussed how invisible instructions impact Google Jules . Turns out that many client applications are vulnerable to these kinds of attacks when they use models that support invisible instructions, like Claude.

Summary from Embrace The Red.

Read the full article at Embrace The Red

Explained

The technology and terms in this story. Learn more

AttackPrompt injectionHiding instructions in content an AI reads, so it follows the attacker instead of its user.

Amp Code: Invisible Prompt Injection Fixed by Sourcegraph

Explained

More in AI

GPT-6.1 Terra meets OpenAI’s Critical cyber threshold, and it’s cheaper than GPT-5.6 Terra

So Many AI Security Benchmarks, But None Tell the Whole Story

Cross-request KV cache exposure in the GLM-5.3 Workers AI model, and our remediation with SGLang

Risks & Rewards: How AI Is Redefining the CISO's Role

Alibaba's Qwen AI caught trying to contact server in China