One repeated prompt cracks the agent chain: 15 retries make an A2A sub-agent hand over its key in 3 of 5 trials
In an A2A multi-agent hierarchy, repeating the same override prompt up to 15 times made a key-holding sub-agent leak its secret in 3 of 5 trials, showing that multi-agent structure alone does not block prompt injection.