PROMPT INJECTION AND TOOL POISONING

DATA EXFILTRATION Exfiltration means secretly taking data out. Data exfiltration is the secret theft of private data. Injection is often only the first step, and exfiltration is the goal. Attackers need a way to move stolen information out, and agents offer many channels: sending an email, making a web request with data placed in the address, posting a comment, rendering an image whose link carries data in its address, or writing to a shared document. The data may be encoded or hidden inside what looks like an ordinary request. A dangerous combination, sometimes called the lethal trifecta, occurs when an agent has all three of these at once: access to private data, exposure to untrusted content, and the ability to communicate outward. Removing any one of the three breaks the attack, and a prudent design avoids having all three in a single agent without strong controls.