A prompt injection flaw in Amazon's Kiro IDE can push sensitive local data to attackers when a poisoned project is…