Unverified50% confidenceConceptExact time
Attack surface refers to the sum of all entry points in a system that an attacker could exploit, including API interfaces, user input fields, file upload functionality, third-party integration callbacks, and so on.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedIndirect prompt injection refers to attack instructions hidden in external web pages, documents, or API responses accessed by an agent, where the malicious instructions are activated when the agent retrieves and injects them into the context.78% similarUnverified环境注入是Agent因具备环境交互能力而特有的新型攻击面，攻击者将恶意指令嵌入Agent读取的外部内容中触发执行70% similarUnverifiedPrompt injection attacks refer to malicious third parties embedding instructions in content processed by an Agent to hijack the Agent's intended behavior.68% similarUnverifiedIn multi-agent systems, if all sub-agents share the same set of tools and access credentials, once a sub-agent is manipulated by a prompt injection attack, the attack surface extends to the entire system.68% similarUnverifiedThe Agents API has three levels: a Session is a persistent task container, a Turn is a single advancement or iteration within it, and Items are the messages, commands, tool results, and final outputs generated during an advancement.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1010641API
curl https://kongchang.com/api/v1/knowledge/claims/1010641MCP
get_claim(id=1010641)