Rethinking Indirect Prompt Injection as a Test-Time Search Problem
arXiv:2609.04495v1 Announce Type: new Abstract: We formulate indirect prompt injection as a test-time search over a task-dependent attack surface induced by the environment, user task, and injection t