Google deletes 3 ADK workflows after prompt-injection attack

Pillar Security showed a public GitHub issue could prompt-inject a triage agent into triggering a privileged code-fixing agent, achieving arbitrary code execution on the CI runner and exfiltrating the bot's PAT. Google removed the three workflows; no in-the-wild exploitation was identified.