ATR-2026-00084highPrompt Injectiondraft
Structured Data Injection via JSON/CSV Payloads
Detects prompt injection payloads hidden within structured data formats such as JSON, CSV, XML, or YAML. Attackers embed malicious instructions inside data field values, exploiting the assumption that structured data is safe and bypassing text-pattern detection that does not parse nested structures.
嚴重度
high
類別
Prompt Injection
掃描目標
mcp
作者
ATR Community (MiroFish Predicted)
建議回應
block inputalertescalatesnapshot
參考資料
MITRE ATLAS
AML.T0051