Verified65% confidenceFactExact time
提示词注入（Prompt Injection）分为直接注入和间接注入两类，直接注入通过用户输入植入恶意指令，间接注入将恶意指令藏匿于AI可能读取的外部内容中
3
Sources
65%
Confidence
Long-term
Relevance
7/16/2026
First Seen
Sources
Related Claims
Partially VerifiedPrompt injection is divided into two categories—direct injection and indirect injection—where indirect injection refers to attackers concealing malicious instructions in external content that the AI may read, such as webpage body text, code comments, README files, and image OCR text.85% similarUnverified提示词注入可分为直接注入和间接注入，间接注入通过被模型读取的外部文档、网页等传递指令79% similarUnverified提示注入可分为直接注入和间接注入两类，间接注入更隐蔽，已在 RAG 系统、浏览器自动化代理等场景中成功实施77% similarUnverified在多人协作线程中，提示注入（Prompt Injection）的攻击面扩大，任何有访问权限的用户都可能成为注入向量，恶意指令可能被伪装成背景补充或方向修正69% similarUnverifiedPrompt injection attacks can use carefully crafted user inputs to induce the model to ignore the constraints of the system prompt.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/532912API
curl https://kongchang.com/api/v1/knowledge/claims/532912MCP
get_claim(id=532912)