As generative AI systems move from research demos into email clients, calendars, and automation pipelines, attackers have found a new surface to exploit: the prompt itself. In the last few weeks security researchers demonstrated practical, zero-click attacks that used ordinary calendar invites and shared documents to make AI systems perform unauthorized actions,