Selected reading
Not what you’ve signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection
An early original paper demonstrating indirect prompt injection through retrieved content. Read the experimental setup and later revisions before generalizing.
通过检索内容演示间接提示注入的早期原始论文；推广结论前核查实验设置与修订版本。
Read at arXiv Cryptography and Security ↗
| Publisher | arXiv Cryptography and Security |
|---|---|
| Selection | Editorial selection |
| Original publication | 2023-02-23 |
| Editorial link review | 2026-10-18 |
| Link review result | ok |
| Topics | Prompt injection, Agent security, Privacy & data protection |
Use this reference
Best suited to: learn, investigate. Follow the original link for the publisher's complete context, methods, and updates.
A link review records when a reference was inspected. It is not a security certification, a reproduction of every claim, or a guarantee that the publication is current today.