domains / families / security / testing-prompt-injection-in-rag-pipelines

testing-prompt-injection-in-rag-pipelines

separate

Probes Retrieval-Augmented Generation pipelines for indirect prompt injection

When to use

• When security-testing a RAG chatbot, internal knowledge assistant, or document-Q&A product before or after release.
• When validating that retrieval guardrails (input/output filtering, context sandboxing) actually block injected instructions.
• During an AI red-team engagement scoped to test the LLM application layer (OWASP LLM Top 10 coverage).
• When you ingest user-controllable or third-party content into a vector store and need to prove the blast radius of a poisoned document.
• As a regression gate in CI/CD: re-run the probe suite on every prompt-template or retriever change.

Skill page

Source