Rethinking Indirect Prompt Injection as a Test-Time Search Problem
A new arXiv paper (2609.04495v1) redefines indirect prompt injection as a test-time search problem, introducing an agentic attacker with a dedicated search harness that performs environment reconnaiss…