Unverified50% confidenceConceptExact time
In direct prompt injection the attacker and victim are the same person (as in jailbreaking), whereas in indirect injection the attacker is a third party who controls external content the model will read, and the victim is an unaware legitimate user.
1
Sources
50%
Confidence
Long-term
Relevance
10/19/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedThe principle of indirect prompt injection is that an attacker disguises malicious instructions as normal data, delivers them to the model through a data source trusted by the agent, and induces the model to interpret the data as instructions and execute them.77% similarUnverifiedRole override is a specific form of prompt injection in which an attacker tries to make the agent abandon its assigned role setting.74% similarUnverified环境注入是Agent因具备环境交互能力而特有的新型攻击面，攻击者将恶意指令嵌入Agent读取的外部内容中触发执行74% similarVerifiedIndirect prompt injection refers to attack instructions hidden in external web pages, documents, or API responses accessed by an agent, where the malicious instructions are activated when the agent retrieves and injects them into the context.72% similarUnverifiedPrompt injection attacks refer to malicious third parties embedding instructions in content processed by an Agent to hijack the Agent's intended behavior.71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1071250API
curl https://kongchang.com/api/v1/knowledge/claims/1071250MCP
get_claim(id=1071250)