displayName
Indirect prompt injection via retrieved content
technique
indirect-injection
severity
critical
signature
Retrieved documents containing imperative instructions targeting the
assistant ("Ignore previous instructions and ...").
description
Adversarial instructions hidden in retrieved web pages, PDFs, or emails
that the agent ingests as context.