Unfortunately "poisoning" code or text doesn't really work. We've been discussing it every now and then. But there is no effective way to do it. It'll get filtered out beforehand and not even reach the LLM or it won't have any effect. So... You can do it, or save your time and spend it on something more useful. It won't do anything either way.

Giving instructions should work. Some people used the Agents.md file to make other people's coding agents do silly things. You can order it to recite Shakespeare or name all the variables like that, make it spam robot emojis or whatever you like. Maybe delete all the files in the repository...

Not sure if comments work as well. I mean it's designed to take instructions from the agents.md file. You can probably confuse it with comments in the code as well and likely make it do things. But the proper location for instructions might be better?!