Your Agentic LLMs Secretly Encode Latent Signals of Indirect Prompt-Injection Exposure

Jianshuo Dong, Yiming Liu, Maosen Zhang +6

Agentic LLMs are vulnerable to indirect prompt injection (IPI) attacks, e.g., malicious side-tasks hidden in external tool results. While many efforts have sought to address the th…