Indirect Prompt Injection Attack on Claude Code 101 CCR instances
96ASR (GPT)MOSAIC
Evaluation results
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| MOSAIC2026.07 | 96 | 95 | 98 | 99 | 100 | 488 | |
| AIShellJack2026.07 | 1 | 0 | 1 | 5 | 4 | 11 | |
| General IPI2026.07 | 0 | 0 | 0 | 3 | 1 | 4 |
| Method | Links | ||||||
|---|---|---|---|---|---|---|---|
| MOSAIC2026.07 | 96 | 95 | 98 | 99 | 100 | 488 | |
| AIShellJack2026.07 | 1 | 0 | 1 | 5 | 4 | 11 | |
| General IPI2026.07 | 0 | 0 | 0 | 3 | 1 | 4 |