Hijacking AI Agents, Part 2: Anatomy of a Hijack

A friendly git-helper skill hides a payload your Markdown preview never shows you. We take it apart line by line and watch one harmless request turn into four silent actions.