Prompt Injection Detection for Email Agents Through Attack Chain Modeling
DGX agentarXiv:2609.30657v1 Announce Type: cross Abstract: Large language model email assistants are particularly vulnerable to indirect prompt injection because untrusted email content can be retrieved into t