Prompt Injection in Coding Agents: Where It Gets In and What Actually Limits the Damage

Prompt injection in coding agents comes through READMEs, issues, PR text, tool results and web pages. Why filtering fails, and the capability limits that actually contain it.