Indirect prompt injection

间接提示注入

The attack instruction hides in external content the agent will read — a page, a document, an email — rather than in user input, exploiting the agent's inability to separate data from instructions.

This definition is citable at a stable URL: https://oceanalt.com/en/glossary/prompt-injection-indirect

← Back to the glossary