Will the User Ever Know? Covert Indirect Prompt Injection Attacks on Tool-Using LLM Agents.

arXiv:2608.30362v3 Announce Type: replace Abstract: As LLM agents take real-world actions through tools, indirect prompt injection (IPI) has emerged as a serious threat. The standard metric, Attack Success Rate (ASR), counts whether an injection succeeds but i