Indirect Prompt Injection on 15 scenarios Query-only injection (E10)
5.3ASRSMSR c1c2
Evaluation results
| Method | Links | ||
|---|---|---|---|
| SMSR c1c2verdict ablation=true, nruns=5, seed store=20-seed, reps=10, scenarios=15, n=150, poison path=agent-signed path2026.06 | 5.3 | 2.7 | |
| Undefendedretrieval protocol=full retrieval, nruns=5, seed store=20-seed, reps=10, scenarios=15, n=150, poison path=agent-signed path2026.06 | 65.3 | 57.4 | |
| Injection reaches retrieval poolnruns=5, seed store=20-seed, reps=10, scenarios=15, n=150, poison path=agent-signed path2026.06 | 100 | — |