Unverified50% confidenceOpinionExact time
For business systems, indirect prompt injection is especially dangerous, because attackers often need no account or login, as long as they can influence some indexed data source.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
Verified间接提示注入可将恶意指令藏入外部数据源（如网页、文档），待代理读取时自动触发攻击74% similarUnverifiedNot modifying the client is a necessary but not sufficient condition for security; having login credentials pass through a third party expands the attack surface.74% similarUnverifiedAny top-up channel that requires users to hand over account login credentials or claims to activate products not yet officially released should be regarded as high-risk72% similarUnverifiedExcessively aggressive automated application behavior may cause users' accounts to be flagged or banned by recruitment platforms.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1047765API
curl https://kongchang.com/api/v1/knowledge/claims/1047765MCP
get_claim(id=1047765)