Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

2023年发表的AI安全论文，系统化提出间接提示注入攻击，揭示LLM集成应用中数据与指令边界模糊的问题，并演示了针对真实应用的攻击