Invoking Gemini Agents with a Google Calendar Invite

The Rise of Autonomous AI Agents in Productivity Suites

Integrating AI agents (such as Google Gemini) into personal productivity tools allows automated parsing of emails, scheduling of calendar events, and retrieval of documents across cloud accounts.

Indirect Prompt Injection via Calendar Invites

Ben Nassi, Or Yair, and Stav Cohen demonstrate an indirect prompt injection attack where an adversary sends a seemingly normal Google Calendar invitation embedded with hidden adversarial instructions.

Autonomous Agent Hijacking and Data Exfiltration

When Gemini processes the user's daily schedule, the embedded payload overrides the agent's core instructions, autonomously querying private emails, searching Google Drive for sensitive documents, and exfiltrating data via web requests.

Architectural Guardrails for Connected AI Ecosystems

Mitigating autonomous agent exploitation requires establishing strict trust boundaries between untrusted external data and internal API execution, requiring user confirmation for high-privilege actions.