Unverified50% confidenceFactExact time
A prompt injection attack refers to a situation where maliciously crafted web pages in an agent's environment inject new instructions, causing the agent's behavior to deviate from the designer's intentions.
1
Sources
50%
Confidence
Long-term
Relevance
10/4/2026
First Seen
Sources
Related Entities
Related Claims
Unverified在多人协作线程中，提示注入（Prompt Injection）的攻击面扩大，任何有访问权限的用户都可能成为注入向量，恶意指令可能被伪装成背景补充或方向修正74% similarUnverifiedIndirect prompt injection refers to attackers pre-embedding malicious instructions into third-party content (such as web pages, PDF documents, or API responses), which the model then executes after RAG systems retrieve or tool calls pull this content into the context.73% similarUnverifiedPrompt Injection refers to text or interface elements appearing on the screen that may contain malicious instructions, inducing the AI to perform unintended or dangerous actions.73% similarVerifiedPrompt injection is divided into two categories—direct injection and indirect injection—where indirect injection refers to attackers concealing malicious instructions in external content that the AI may read, such as webpage body text, code comments, README files, and image OCR text.71% similarUnverifiedAttackers tamper with a model's chat template by calling the create API, permanently injecting malicious instructions into the System prompt; this change is stored in the model's Modelfile and is invisible to the client and undetectable by standard tools.71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/974086API
curl https://kongchang.com/api/v1/knowledge/claims/974086MCP
get_claim(id=974086)