Divide and Inject: Can Agents Reconstruct an Indirect Prompt Injection from Fragments?
arXiv:2609.36576v1 Announce Type: new Abstract: Agentic systems are now being widely used to orchestrate tools and reason over long contexts. However, the improving capabilities of the large language