Indirect prompt injection

Indirect prompt injection is a prompt injection hidden in content a model processes, such as a web page, email or document, rather than typed by the user, so the attack arrives through retrieved data.

Indirect prompt injection sits in the Prompting & context part of the Agentik {OS} glossary, which defines the words used to build and run AI agent systems.