GhostCommit research demonstrates trust boundary risks between image content and AI code review

The ASSET research group reports GhostCommit, discussing the risk that untrusted instructions in images are not identified by code review tools and subsequently affect coding agent behavior. The study notes that the same underlying model may perform differently across different product environments. The results come from the authors' controlled tests and code review surveys; no real victim incidents were reported, and individual test results cannot be generalized to all product configurations being affected.