For example, an attacker can embed an instruction into source code or a merge request to leak confidential resources available to the targeted user (and by extension the Duo chatbot in use) but ...