Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection
Foundational public research on indirect prompt injection. Linked only; no payloads reproduced.
The paper studies risks when language-model applications encounter instructions through external content. This entry links to public security research for threat modeling and intentionally omits payloads and exploit procedures.
- Level
- Advanced
- Models
- any
- Category
- Security And Red Teaming
- Tags
- security, prompt-injection, research
- Source date
- 2023-02-23
- Added
- 2026-10-18
- Last verified
- 2026-10-18
- Status
- ok
- Prerequisites
- Requires implementation experience or critical reading of technical methods and system trade-offs.
- Subcategory
- prompt injection
- Region
- West
- Original language
- en
- Access
- free
- Resource reuse
- closed: No general open-reuse grant established from the inspected page. Closed is the conservative index bucket, not a legal finding; the resource is publicly readable. Facet definitions
Summary in our own words. Rights remain with the original creator. Credit and correction policy.