CoER: Defending against Adaptive Indirect Prompt Injection via Adversarial Co-Evolution and Refinement

Boyang Zhang, Qingxin Xiao, Lingwei Dang +1

Language-model agents are vulnerable to indirect prompt injection (IPI) during tool use: adversarial instructions hidden in untrusted tool outputs can covertly redirect legitimate…