TRACER: Trace-Regularized Training Against Indirect Prompt Injection
DGX agentarXiv:2610.19133v1 Announce Type: new Abstract: Indirect prompt injection uses untrusted retrieved content, tool outputs, or agent messages to override an LLM's intended behavior. We show that defense