1 min lesson
Indirect injection is what makes the lethal trifecta lethal
Explain the practical point behind "Treat model output as untrusted, the same way you treat user input."
Step 1 of 3
Indirect injection is what makes the lethal trifecta lethal. The attacker writes a payload into a file, a web page, an issue or a tool's output, then waits for an agent with private-data access and an exit channel to read it.