Indirect prompt injection — Indirect prompt injection is prompt injection delivered through outside content rather than typed by the user. An agent reading a web page might find hidden text telling it to send private data elsewhere. The user often never sees the attack. It is one of the biggest security risks for AI agents.
Added October 21, 2026

