Indirect Prompt Injection

An indirect prompt injection attack occurs when malicious instructions are embedded in external content, such as a document, email, website, or data source, that an AI application or agent retrieves and processes. These instructions can manipulate the system into ignoring its intended behavior, exposing sensitive data, or performing unauthorized actions.