Security

Prompt Injection

• Prompt Injection: What It Is and How to Defend Against It
• A Severity Rubric for Injection Failures: What Blocks a Release
• How to Test an LLM Application for Prompt Injection
• Indirect Injection Through the Files Your Agent Opens
• A Release Gate That Reads Injection Scores From CI
• A Review Queue for Human-Judged Injection Cases
• Detecting Prompt Injection in Production
• Injection Cases for a Refund Tool
• Scoring Injection Tests Automatically, Without a Human Reviewer
• Short-Circuiting Injection: Marking Tool Output as Untrusted
• Testing Indirect Injection Through Retrieved Documents and Pages
• Testing Prompt Injection After a Model Upgrade
• When a Retrieval Source Is the Attack Surface
• When an Injection Test Fails in Production: Triage and Contain
• Writing a Prompt Injection Test Corpus That Stays Useful