Confused Deputy Problem

Indirect Prompt Injection: The XSS of the AI Era

This content introduces Indirect Prompt Injection (IPI) as a silent yet dangerous threat to LLMs, where AI agents become "Confused Deputies." By reading poisoned data, LLMs with tool-use capabilities can be manipulated to exfiltrate data or perform unauthorized actions without explicit user consent.