InsideIndirect Prompt Injection: Every Channel, One Payload
A channel-by-channel reference for indirect prompt injection: web pages, HTML comments, CSV exports and email. Same payload, six ways in, and what to check.
A channel-by-channel reference for indirect prompt injection: web pages, HTML comments, CSV exports and email. Same payload, six ways in, and what to check.
I ran eight prompt-leak payloads at an input blocklist and an output redactor. One got blocked. A system prompt is not a secret store, and here are the numbers.
Map a RAG chatbot's knowledge base from its sources field: spot retrieval, read chunk IDs and scores, enumerate documents by topic and find the retrieval threshold.