Attack technique
Indirect Prompt Injection: When Content Becomes an Instruction
Planned brief: how untrusted retrieved content can influence an AI system.
In preparation
This URL is reserved for the brief. The full text is not published yet. If this is the problem in front of you, talk to the engineers.