Kai Greshake等人在2023年论文《Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection》中系统化了间接提示注入攻击，并演示了针对Bing GPT-4 Chat等应用的有效攻击。