Will the User Ever Know? Covert Indirect Prompt Injection Attacks on Tool-Using LLM Agents

Yunseok Lee, Yunji Kim, Woojin Lee

As LLM agents take real-world actions through tools, indirect prompt injection (IPI) has emerged as a serious threat. The standard metric, Attack Success Rate (ASR), counts whether…