Indirect prompt injection

Indirect prompt injection occurs when an AI system encounters attacker-controlled instructions embedded in external content, such as webpages, documents, email, retrieved data, or tool output, and treats them as instructions during task execution. Detection can surface possible compromise, but it does not by itself solve the attack.