Benchmarking indirect prompt injection with task-tampering attacks
New benchmark tests task-tampering in indirect prompt injection across 90 cases in three tool-use environments, showing higher success on decision rules and actions than objective attacks.