APEX: Active Protection at Execution Boundaries for LLM Agents

Xinran Zheng, Xin Fan Guo, Zhiqiang Hao +7

Indirect prompt injection (IPI) hides adversarial instructions in content that large language model (LLM) agents read at runtime. As agents compose heterogeneous capability units,…