1 paper
Yusuf Khalid Shire, Sang-Chul Kim
Prompt-injection detectors are typically evaluated using aggregate F1 on in-distribution test data, which offers limited insight into behavior under distribution shift, particularl…