domains / families / security / detecting-indirect-prompt-injection

detecting-indirect-prompt-injection

separate

Detect and defend against indirect prompt injection hidden in web pages, documents,

When to use

• When building or hardening an agent that browses the web, reads email, summarizes documents, or processes user-uploaded files/images.
• When you need a content-sanitization gate in front of an LLM that ingests third-party data.
• During AI red-team / blue-team exercises validating that injected instructions in retrieved artifacts are caught.
• When investigating an incident where an agent behaved as if it received instructions you did not author.
• As a CI/CD pre-ingestion scan for documents added to a knowledge base.

Skill page

Source