Google removed three workflows from its ADK Python repository after a reported GitHub issue path appeared able to steer a triage agent toward a privileged code-fixing action.
A low-privilege agent can become a carrier for malicious context, turning an ordinary hand-off into a risk path for secrets and repository tampering.