Prompt InjectionTier 6high
Prompt Injection: Contextual Confusion
Direct and indirect instruction override attacks
When AI agents process documents, every element is a potential injection surface. Headers, footers, metadata, comments, and even formatting can carry hidden instructions that the agent may follow.
Attack Details
- Attack ID
- APWN-PI-006
- HMA Check
- INJ-002
- Delivery Methods
- json-ld, invisible-span, aria-label, image-alt
- CWE
- CWE-74
- OASB Control
- 3.5
- Severity
- high
Remediation
If your AI agent is vulnerable to this attack, scan and fix with:
npx hackmyagent secure --check INJ-002