---
id: "greshake-indirect-prompt-injection"
title: "Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection"
creator: "Kai Greshake et al."
creator_url: "https://arxiv.org/abs/2302.12173"
url: "https://arxiv.org/abs/2302.12173"
level: "advanced"
level_max: null
category: "security-and-red-teaming"
subcategory: "prompt-injection"
region: "West"
license: "closed"
license_scope: "linked-resource"
models: ["any"]
source_date: "2023-02-23"
date_added: "2026-10-18"
---

[Security And Red Teaming](/security-and-red-teaming/index.md)

# Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

by [Kai Greshake et al.](https://arxiv.org/abs/2302.12173)

[Read the original →](https://arxiv.org/abs/2302.12173)

Foundational public research on indirect prompt injection. Linked only; no payloads reproduced.

The paper studies risks when language-model applications encounter instructions through external content. This entry links to public security research for threat modeling and intentionally omits payloads and exploit procedures.

Level: [Advanced](/levels/index.md#advanced)
Models: any
Category: [Security And Red Teaming](/security-and-red-teaming/index.md)
Tags: [security](/tags/security/index.md), [prompt-injection](/tags/prompt-injection/index.md), [research](/tags/research/index.md)
Source date: 2023-02-23
Added: 2026-10-18
Last verified: 2026-10-18
Status: ok
Prerequisites: Requires implementation experience or critical reading of technical methods and system trade-offs.
Subcategory: [prompt injection](/security-and-red-teaming/prompt-injection/index.md)
Region: West
Original language: en
Access: free
Resource reuse: closed: No general open-reuse grant established from the inspected page. Closed is the conservative index bucket, not a legal finding; the resource is publicly readable. [Facet definitions](/about/index.md#facets)

Summary in our own words. Rights remain with the original creator. [Credit and correction policy](/about/index.md#credit-policy).

[Plain-text Markdown copy](/security-and-red-teaming/prompt-injection/greshake-indirect-prompt-injection/index.md)