---
id: "greshake-indirect-prompt-injection"
title: "Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection"
creator: "Kai Greshake et al."
url: "https://arxiv.org/abs/2302.12173"
level: "expert"
category: "agents"
models: ["any"]
source_date: "2023-02-23"
date_added: "2026-10-18"
---

[Agents and harnesses](/agents/index.md)

# Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

by Kai Greshake et al.

[Read the original →](https://arxiv.org/abs/2302.12173)

Foundational public research on indirect prompt injection. Linked only; no payloads reproduced.

The paper studies risks when language-model applications encounter instructions through external content. This entry links to public security research for threat modeling and intentionally omits payloads and exploit procedures.

Level: [Expert](/levels/index.md#expert)
Models: any
Category: [Agents and harnesses](/agents/index.md)
Tags: [security](/tags/security/index.md), [prompt-injection](/tags/prompt-injection/index.md), [research](/tags/research/index.md)
Source date: 2023-02-23
Added: 2026-10-18
Last verified: 2026-10-18
Status: ok

Summary in our own words. All rights with the original creator. Correction or removal: DM on X.