Sneaking Invisible Instructions by Developers in Windsurf

<a id="top_ref"></a>

<p>Imagine a malicious instruction hidden in plain sight, invisible to you but not to the AI. This is a vulnerability discovered in Windsurf Cascade, it follows invisible instructions. This means there can be instructions in a file or result of a tool call that the developer cannot see, but the LLM does.</p> <p><a href="https://embracethered.com/blog/images/2025/episode23-yt.