Google Antigravity exfiltrates data via indirect prompt injection attack