Prompt injection

Attacks that hide instructions in the content an AI reads, and how they actually play out against real agents.

From the Lab

I tried six ways to make an AI agent leak recovery codes. One worked.

I built a support agent and ran six attacks at it across three models. The technical tricks got nothing. The con that works on a tired help desk worked on the agent too.