Self-Replicating Prompt Injections Turn Agent Context into an Open Relay

Most developers still treat prompt injection as a leakage problem. Someone types an adversarial...