InsideIndirect Prompt Injection: Every Channel, One Payload
A channel-by-channel reference for indirect prompt injection: web pages, HTML comments, CSV exports and email. Same payload, six ways in, and what to check.
A channel-by-channel reference for indirect prompt injection: web pages, HTML comments, CSV exports and email. Same payload, six ways in, and what to check.
LLM command injection in the lab: one prompt, two runs, a safely quoted command and an executed id. Why shell escaping cannot be left to the model, and the fix.
LLM function calling breaks in three separate places. I typed I am an administrator and ran whoami. The handler, the function list and the functions themselves.
LLM jailbreak techniques sorted by the defence each one attacks: the system prompt, trained refusal, or the bolted-on filter. Plus how to measure it with garak.
I mapped a database through a text-to-SQL chatbot without writing a line of SQL. Why LLM SQL injection is an authorisation failure, not an injection bug.
I ran eight prompt-leak payloads at an input blocklist and an output redactor. One got blocked. A system prompt is not a secret store, and here are the numbers.