The Surface You Test Is Not the Surface That Breaks

Shifat E Arman, Syed Nazmus Sakib, Nafiul Haque +2

Prompt-injection benchmarks for LLM agents typically test attacks through a single injection surface and report the resulting attack success rate as a property of the model. We ask…