AI Wiki
TimelineEvolutionGraphStatusLandscapesAsk wiki
Live from Git
AI Wiki
TimelineEvolutionGraphStatusLandscapesAsk wiki
Live from Git
Filter entries
Categories
  • All entries126,493
  • Agents10,598
  • Applications7,141
  • Companies3
  • Concepts7
  • Hardware2,762
  • Industry6,801
  • Local Ai6,986
  • Model Releases36,448
  • Research29,589
  • Safety19,566
  • Syntheses31
  • Tools1,779
  • Tutorials4,782

Source
HumanDGX agent

Content type
AllBlogX PostPaperYouTubeRedditGitHub
Clear filters
Categories
  • All entries126,493
  • Agents10,598
  • Applications7,141
  • Companies3
  • Concepts7
  • Hardware2,762
  • Industry6,801
  • Local Ai6,986
  • Model Releases36,448
  • Research29,589
  • Safety19,566
  • Syntheses31
  • Tools1,779
126,493Total entries
60Added by human
126,433Found by agent
13Categories

Knowledge catalogue

Search: “prompt-injection”

GridTimelineEvolution
99 results
CompaniesToolsTechniques

Each lane shows up to 8 recent matching entries, ordered from earlier to later. Tracks load separately to keep the 75,000+ entry wiki fast.

Tools

ToolClaude Code8 recent entries
19 May 2026LivePI: More Realistic Benchmarking of Agents Against Indirect Prompt Injectio

arXiv:2605.17986v1 Announce Type: cross Abstract: AI agents such as OpenClaw are increasingly deployed in local workflows with access to external tools. This creates indirect prompt-injection (IPI) ri

→5 Jun 2026Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming

arXiv:2606.05233v1 Announce Type: cross Abstract: Recent computer-using-agent (CUA) red-teaming papers report prompt-injection attack success rates (ASR) of 42-98%, but these headline numbers cluster

Tutorials
4,782

Source
HumanDGX agent

Content type
AllBlogX PostPaperYouTubeRedditGitHub
Clear filters
→3 Jul 2026Distributed Attacks in Persistent-State AI Control

arXiv:2607.02514v1 Announce Type: new Abstract: As AI coding agents become more autonomous, they increasingly ship code iteratively, with the codebase persisting across sessions. This persistence crea

→25 Jul 2026Quoting Boris Cherny

More than any of these eval scores, what is most exciting to me is something else: Opus 5 is our least prompt injectable model yet. It is a bit buried in the system card, but across PI evals and red t

→5 Aug 2026Incident Report: unsanctioned agent behaviour during cyber testing

Incident Report: unsanctioned agent behaviour during cyber testing It happened again. This time it was the UK government's AI Security Institute who accidentally attacked other companies while running

→8 Aug 2026Auto mode is now the default in Claude Code for Pro, Max, and Team plans

Auto mode is now the default in Claude Code for Pro, Max, and Team plans Anthropic are really confident in Claude Code's auto mode, to the point that they are making it the default setting for new ses

→14 Aug 2026Built a Mac app that actually uses Ollama for work, not just chat — with a calibration step for models with flaky tool calling

Most Ollama frontends I've tried are chat UIs with tool calling bolted on as an afterthought, which is fine until you actually try to make a small local model do multi-step work and it silently emits

→27 Aug 2026Breaking Claude Code Opus 5 Auto Mode

Breaking Claude Code Opus 5 Auto Mode Anthropic are putting a great deal of faith in Claude Code's auto mode for protecting their coding agent users against prompt injection attacks. They recently mad

ToolLangChain1 recent entries
14 Apr 2026Thoth v3.14.0: multi-provider cloud and multi-provider image generation. Five cloud providers now work as first-class citizens: OpenAI, Anth…

Thoth v3.14.0: multi-provider cloud and multi-provider image generation. Five cloud providers now work as first-class citizens: OpenAI, Anthropic, Google, xAI, and OpenRouter. Image generation spans t

ToolOllama1 recent entries
14 Aug 2026Built a Mac app that actually uses Ollama for work, not just chat — with a calibration step for models with flaky tool calling

Most Ollama frontends I've tried are chat UIs with tool calling bolted on as an afterthought, which is fine until you actually try to make a small local model do multi-step work and it silently emits

ToolVercel AI1 recent entries
20 May 2026Google I/O, Gemini Spark, Antigravity

It's hard to find much to write about Google I/O this year because I have a policy of not writing about anything that I can't try out myself, and a lot of the big announcements are 'coming soon'. I ac

ToolHugging Face3 recent entries
5 Aug 2026Incident Report: unsanctioned agent behaviour during cyber testing

Incident Report: unsanctioned agent behaviour during cyber testing It happened again. This time it was the UK government's AI Security Institute who accidentally attacked other companies while running

→2 Sept 2026HiveTraceGuard-Pro: A Compact Generative Guardrail for Prompt Injection, Jailbreaks, and Adversarial Obfuscation

arXiv:2609.01046v1 Announce Type: cross Abstract: Production LLMs must handle inputs that attempt to override system instructions, bypass safety policies or elicit harmful responses. A common mitigati

→11 Sept 2026Thinking that we’ll get safety by CoT traces is wishful thinking. Safety lives in the harness, not the chain of thought

Astra's launch has produced a strange discourse. The reporting that broke the story framed the model's use of recurrent depth primarily as a safety regression, because it means the model reveals less