PhantomLint: Principled Detection of Hidden LLM Prompts in Structured Documents

Toby Murray

Hidden LLM prompts have appeared in online documents with increasing frequency. Their goal is to trigger indirect prompt injection attacks while remaining undetected from human ove…