Hiding in Plain Floats: Steganographic Carriers for Indirect Prompt and Content Injection

Mudit Sinha, Sanika Chavan

Text-centered prompt-injection defenses assume that the malicious signal is visible in one of the inspected text views. We study a reproducible LLM01-style indirect prompt/content-…