The Surface You Test Is Not the Surface That Breaks

Shifat E Arman, Syed Nazmus Sakib, Nafiul Haque +1

Tool-augmented LLM agents are vulnerable to prompt injection: a third party who controls part of the agent's context can plant instructions that the agent then executes as if they…