arXiv (All)
open access
Divide and Inject: Can Agents Reconstruct an Indirect Prompt Injection from Fragments?
Agentic systems are now being widely used to orchestrate tools and reason over long contexts. However, the improving capabilities of the large language models powering these agents also create new attack surfaces for indirect prompt injection. In particular, an attacker may not need to place a compl
Conceptio Open Archive
Analyze & explore related research in Conceptio
Connect this record directly into your research workflow or AI agent. Explore citations across open repositories, query full text, and export structured proof bundles.
This document is indexed with metadata only: full text is not available in the archive for this record. Open the official source ↗
Related documents
- Prefill-level Jailbreak: A Black-Box Risk Analysis of Large Language Models#1131390
- Predication and the Frege–Geach problem#706008
- From Role Prompt to Infinite Thinking: Exploiting Persona Conditioning for Inference Cost Attacks in LLMs#410959
- CausalArmor: Efficient Indirect Prompt Injection Guardrails via Causal Attribution#1155115
- Analyzing Defensive Misdirection Against Model-Guided Automated Attacks on Agentic AI Systems#1077900
Record · ID 1131777
Retrieved via Conceptio: every document is proof-bundled with source, license, and retrieval metadata.
Retrieved via Conceptio: every document is proof-bundled with source, license, and retrieval metadata.
Bring this data into your agent: Connect via MCP or API · 20 free credits to start · no card required
Read the Docs → · View CLI source on GitHub · Conceptio Open Knowledge Archive
Read the Docs → · View CLI source on GitHub · Conceptio Open Knowledge Archive