Indirect prompt injection
Malicious instructions embedded in content an agent retrieves or opens rather than typed by the user.
What Indirect prompt injection does not show
Treating remote content as data, not authority, is the core boundary.
Related terms in Security and privacy
Where an agent, a tool or a page can be turned against its operator, and the controls that limit the damage without proving safety.
X-Frame-Options · frame-ancestors · Referrer-Policy · Permissions-Policy · Encrypted Client Hello · lookalike domain · homoglyph · incident switch · high-risk field · Direct prompt injection · Jailbreak · Data exfiltration · Sensitive information disclosure · Secret leakage · Insecure output handling · Excessive agency · Least privilege · Trust boundary · Input validation · Output validation · Allowlist · Denylist · SSRF · RCE · Credential scope · OAuth scope · API key · Bearer token · mTLS · Rate-limit policy · Audit log · PII · Data minimization · Purpose limitation · Retention period · Data residency · Tenant isolation · Threat model · DMARC · DMARC alignment · SPF · DKIM · MTA-STS · TLS-RPT · CAA record · DNSSEC · hard bounce
Questions about Indirect prompt injection
What is Indirect prompt injection?
Malicious instructions embedded in content an agent retrieves or opens rather than typed by the user.
What does Indirect prompt injection not show or guarantee?
Malicious instructions embedded in content an agent retrieves or opens rather than typed by the user. Treating remote content as data, not authority, is the core boundary.
Which area of the glossary does Indirect prompt injection belong to?
Security and privacy: Where an agent, a tool or a page can be turned against its operator, and the controls that limit the damage without proving safety.
← high-risk field · Direct prompt injection →
See it in the full glossary · 772 terms across 19 areas.
Free browser extension
See this on any site you visit, in one click.
CrawlCheck for Chrome grades every site you visit A–F and shows, from your own browser, what search engines and AI assistants are actually served. Free, no account.