18:01
2026-07-09
lesswrong.com
ai-safety
Your Prompt-Injection Defense Metric Might Be Lying to You
An independent researcher found that existing indirect prompt injection benchmarks like BIPIA, InjecAgent, and AgentDojo may produce unreliable scores due to reliance on LLM-judges and evaluation of e…