Attack

Prompt injection

Hiding instructions in content an AI reads, so it follows the attacker instead of its user.

An AI model cannot reliably tell its user's instructions apart from text inside a web page, email or document it was asked to process. Prompt injection exploits that to make assistants leak data or take actions. It is especially dangerous for agents that can browse, send messages or run tools.