ATR-2026-00083highPrompt Injectiondraft
Indirect Prompt Injection via Tool Responses
Detects indirect prompt injection payloads embedded in tool responses, API outputs, or retrieved content. Attackers place hidden instructions in external data sources that the agent processes, causing it to execute unintended actions when the poisoned data is consumed.
Severity
high
Category
Prompt Injection
Scan Target
mcp
Author
ATR Community (MiroFish Predicted)
Response Actions
block inputalertescalatesnapshot
References
MITRE ATLAS
AML.T0051