1. I said "frontier model got prompt injected when checking if code if malicious". You linked some random ad.

2. Nobody uses antigravity

3. That's not a prompt injection! That user prompt literally tells the LLM to follow a guide on the web. The guide says "do bad stuff" which the LLM does, just as the user asked. It would be a prompt injection if the prompt asked the LLM to analyze the guide, but that's obviously not what it asked