ResearchBenchmarksIndirect Prompt Injection Attack on payloads OriginalIndirect Prompt Injection Attack on payloads OriginalFollow10Attack Success Rate (IA)Undefended-0.42.357.7Oct 20, 2025Evaluation resultsMethodMethodLinksAttack Success Rate (IA)Attack Success Rate (Gr.)Attack Success Rate (AD)Undefended2025.10101717ACF2025.10101717LP2025.10101717LFBacking LLM=LlamaBacking LLM=Llama2025.10003LFBacking LLM=GPT-4oBacking LLM=GPT-4o2025.10000LFBacking LLM=GPT-4o-miniBacking LLM=GPT-4o-mini2025.10000LFBacking LLM=o4-miniBacking LLM=o4-mini2025.10000CV (ours)2025.10000