Verified70% confidenceFactExact time
Prompt injection is divided into two categories: direct injection (the user directly manipulates model behavior) and indirect injection (contaminating the context through external data sources).
4
Sources
70%
Confidence
Long-term
Relevance
7/6/2026
First Seen
Sources
Unpacking the Anthropic Prompt Injection Controversy: The Battle Over System Prompt Transparency
hackernewshackernews7/5/2026
Related Claims
VerifiedPrompt injection attacks fundamentally exploit the inherent flaw of large models in failing to separate instructions from data, and are divided into two categories: direct injection and indirect injection.75% similarUnverifiedLetting a model see the outputs of other models is essentially injecting additional information into the input, which is a different matter from whether models can develop emergent capabilities through interaction.72% similarVerified提示注入是一种针对大语言模型的攻击手法，攻击者通过在模型输入数据中嵌入恶意指令劫持模型的正常行为70% similarUnverifiedWhen a model receives poisoned input (prompt injection or indirect injection), it may be induced to perform actions the user never authorized.69% similarUnverifiedPrompt injection attempts to override the system prompt and induce the model to perform unauthorized actions by embedding malicious instructions into external content processed by the model, and is logically analogous to SQL injection.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/113857API
curl https://kongchang.com/api/v1/knowledge/claims/113857MCP
get_claim(id=113857)