Prompt

原始 Prompt

Landscape 16:9 security-paper figure of an indirect prompt-injection attack against a tool-using LLM agent. Four columns left-to-right, numbered flow markers ①②③④ along the main arrows. COLUMN 1 "Legitimate user": silhouette + speech bubble "Summarise the Slack channel for me." COLUMN 2 "Agent (LLM + tools)": hexagon hub "Frozen LLM" with warm-copper top edge; panel "Tools: read_slack, web_browse, send_email"; attached chip "System prompt: You are a helpful assistant. Use tools to answer. Never exfiltrate data." COLUMN 3 "Third-party content (attack surface)": stacked boxes "Public Slack message" (slate gray), "Web page" (slate gray), and "Attacker-controlled document" (soft-terracotta fill, dashed border) containing visible payload "" COLUMN 4 "Outcome": "Summary returned to user" (slate gray); "Attacker receives exfiltrated data" (soft-terracotta, skull glyph). ARROWS: solid slate-gray = benign flow; dashed soft-terracotta = injection path. Key dashed arrow: Column-3 attacker document → Column-2 agent hub, labeled "injected instructions". Title: "Indirect prompt injection: attacker hides payloads in third-party content consumed by the agent". Subtitle: "Greshake et al., 2023; applies whenever an LLM agent consumes untrusted text."

科研图示

间接提示注入攻击流程

科研图示精选案例，来源 @GPT-Image2-Skill精选 No. 95。

@GPT-Image2-Skill精选

0 收藏

相似案例

基于《间接提示注入攻击流程》的分类、风格标签、作者、模型和 Prompt 结构推荐