The Anatomy of a Prompt Injection: A Component Model for Structured Analysis
arXiv:2608.07808v1 Announce Type: cross Abstract: Four years after prompt injection was first identified in 2022, attacks are still predominantly documented as verbatim strings rather than structured