Prompt injection

In the direct variant, an attacker writes something like “Ignore all previous instructions …”. The indirect variant is more dangerous: the instruction is hidden in a web page, email or document that an AI agent reads – and the agent carries it out, for example by passing on data.

There is no complete protection yet. Minimal permissions, separation of trusted and external content, approvals for sensitive actions and monitoring are therefore important.