Unverified50% confidenceSolutionExact time
Malicious prompts in spreadsheets can be hidden in white-colored text, hidden columns, or comments, and once read by an agent they trigger unintended behavior.
1
Sources
50%
Confidence
Long-term
Relevance
9/12/2026
First Seen
Sources
Related Entities
Related Claims
Unverified攻击者可利用视觉不可见的Unicode特殊字符或白色文字置于白色背景使人工审阅防御失效71% similarUnverifiedHidden prompt injection instructions can be embedded in documents via white-colored text, extremely small font sizes, or metadata.71% similarUnverifiedSpammers have begun deliberately producing "imperfect" content—such as all lowercase, no punctuation, and intentional spelling errors—to evade AI detection mechanisms.69% similarUnverifiedScreen readers also read underlying text encoding, so font distortion is ineffective as a defense against them, but when fonts are rendered as images, the information channel for visually impaired users is cut off.69% similarUnverifiedResearchers have found that hidden character techniques can be used to launch prompt injection attacks against large language models, embedding hidden instructions within normal text that the model will parse and execute.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/911912API
curl https://kongchang.com/api/v1/knowledge/claims/911912MCP
get_claim(id=911912)