Hidden prompts in Google Calendar events can trick Gemini AI into executing malicious commands via indirect prompt injection.