Skip to lesson
Exit
AI & Agent Security Threat Model1 / 3

1 min lesson

Indirect injection is what makes the lethal trifecta lethal

Explain the practical point behind "Treat model output as untrusted, the same way you treat user input."

Step 1 of 3

Indirect injection is what makes the lethal trifecta lethal. The attacker writes a payload into a file, a web page, an issue or a tool's output, then waits for an agent with private-data access and an exit channel to read it.