Hiding in Plain Floats: Steganographic Carriers for Indirect Prompt and Content Injection
arXiv:2606.08403v1 Announce Type: cross Abstract: Text-centered prompt-injection defenses assume that the malicious signal is visible in one of the inspected text views. We study a reproducible LLM01-