Skip to content
← All scenarios
Attack prompt-injectionindirect-injectionmodel-mediated

Poison an AI summary to leak a secret

Craft a comment that hijacks a support agent’s LLM summariser into leaking its system secret — the lethal-trifecta prompt injection, runnable in your browser.