Prompt injection

MCP and safety · prompt injection

An attack where someone hides an instruction for the agent inside their own text: an email, a ticket, a web page. The agent reads it along with the data, takes it as part of the request, and its behaviour is swapped: it does what the attacker wants instead of what you asked. The more access the agent has, the costlier the swap.