~ / cases / prompt-injection-role-confusion

◌ Prompt Injection — Role Confusion

Client-controlled context and message roles that blur the boundary between user content, assistant output and system instructions.

[docker lab] role-boundary

Test prompt injection caused by manipulated chat-selection roles. Run it locally to practice the proof of concept in an isolated environment.

aurora@hack:~$ ls ./cases/prompt-injection-role-confusion

▲ High7 min read

Prompt Injection via Chat Selection and Role Confusion

A chat-selection feature trusted client-controlled markup, allowing selected assistant content to be rewritten as a system message before the next model request.

#prompt-injection#role-confusion#chat-context#ai-agent

other classes: arbitrary-file-read · rce · sqli · system-prompt-exfiltration