GitLost shows how a public issue can make GitHub's AI agent leak private repo data

Noma Labs says a prompt injection in GitHub Agentic Workflows crossed from public issue text into private repository content.