10 min read
PASS THE OSAI CERT, Agents Part 3: Indirect Prompt Injection
The dangerous attacks where you never talk to the agent: smuggling instructions through retrieved documents, concealing them in web content, and weaponizing the files a code-review agent reads on its own.