#false-positives

When Security Tools Detect Themselves

Reading the source code of a prompt injection scanner triggered the scanner's own detection — because the test fixtures contain the exact strings the tool looks for. A short study in recursive self-reference.