Shaban Asif

What surrounds an injection decides whether it works: context and channel effects in tool-metadata attacks on seven production LLM agents. Data and code

A data and code for a study of indirect prompt injection in tool-using large language model agents. I performed 1,334 controlled trials across seven production models. In every comparison the injected instruction is held byte-identical and only its surroundings vary, so any diffe...