Divide and Inject: Can Agents Reconstruct an Indirect Prompt Injection from Fragments?

Michael Lee, Zhipeng Wei, Yue Dong +1

Agentic systems are now being widely used to orchestrate tools and reason over long contexts. However, the improving capabilities of the large language models powering these agents…