Verified80% confidenceFactExact time
In a Prompt Injection attack, an attacker can craft a special input to induce the Agent to perform unintended operations.
6
Sources
80%
Confidence
Long-term
Relevance
7/6/2026
First Seen
Sources
Related Claims
UnverifiedPrompt injection attacks refer to malicious third parties embedding instructions in content processed by an Agent to hijack the Agent's intended behavior.81% similarUnverifiedAn Agent compromised by prompt injection may act entirely within the authorized scope, yet execute the attacker's intent rather than the user's intent, appearing fully compliant from a permission-model perspective.78% similarVerifiedPrompt injection is a novel and unique attack vector targeting operational agents; malicious web pages can inject instructions into an agent via visual elements or hidden text, and how to distinguish real instructions from forged ones remains an open problem that has not been fully solved.78% similarUnverifiedAgents may execute destructive operations far beyond what was intended due to hallucination or prompt injection attacks.76% similarUnverifiedIn optimization-based jailbreak attacks, attackers typically construct the input as a combination of an "adversarial prefix" and a "suffix": the prefix is inserted before the user instruction to steer the model into a state receptive to malicious instructions, and the suffix is appended after the instruction to reinforce the attack effect.76% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/112620API
curl https://kongchang.com/api/v1/knowledge/claims/112620MCP
get_claim(id=112620)