> How Devin AI Can Leak Your Secrets via Multiple Means

In this post we show how an attacker can make Devin send sensitive information to third-party servers, via multiple means. This post assumes that you read the first post about Devin as well. But here is a quick recap: During an indirect prompt injection Devin can be tricked into download malware and extract sensitive information on the machine. But there is more… Let’s explore how Devin can leak sensitive information and send it to a third-party server.