Beyond Instruction Override: Benchmarking Indirect Prompt Injection with Task-Tampering Attacks

Rongting Zhang, Martin Bertran, Sandeep Avula +2

Indirect prompt-injection (IPI) benchmarks predominantly test planted instructions that redirect a tool-using agent toward an attacker-chosen task. Yet attacker-controlled content…