Indirect prompt injection
Also called indirect injection
Prompt injection delivered through data the model reads later, such as a web page, email, document or tool result, rather than typed by the user.
Interview questions about Indirect prompt injection
- What is the difference between direct and indirect prompt injection? Give an example of each.
Direct: the person typing is the attacker, as in "When will my order arrive?
- What's the difference between a jailbreak and a prompt injection?
A jailbreak gets past the model's safety features. Prompt injection adds instructions that make the app do something unintended: typed by the user (direct)…
- Design a RAG-based agent system: how it retrieves, how it grounds its answers, and how it enforces access control.
Retrieval becomes tools the agent calls, a search per source, so it can reformulate and search again.