Proof of Concept (PoC) demonstrating prompt injection vulnerability in AI code assistants (like Copilot) using hidden Unicode characters within instruction files (copilot-instructions.md). Highlights risks of using untrusted instruction templates. For educational/research purposes only.
1 file for GitHub Copilot: copilot-instructions-unicode-injection copilot-instructions.md — 1,064 tokens loaded in every session.
.github/copilot-instructions.md A 1,064 tok These files are hugobatista/copilot-instructions-unicode-injection's own configuration — they tell GitHub Copilot how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.