Readable Before Actionable: Causal Tracing of Indirect Prompt Injection

Zhe Yu, Wenpeng Xing, Xingxing Yang +1

Indirect prompt injection causes LLM agents to follow commands embedded in external data. A probe may distinguish instructions from data without identifying a state edit that chang…