Skip to content
← All scenarios
Attack → Patch indirect-injectionlink-exfilagentic-web

Exfiltrate a private title with one comment

A poisoned comment steers an AI summariser into leaking an unreleased title to your collector — then patch the app until it cannot.