Classic prompt injection exfiltration attack here, reported against Salesforce Agentforce and now fixed

→ View original post on X — @simonw