Comparison
DirectvsIndirect injection
Direct
Direct: the attacker is the user, typing the attack.
Indirect injection
Indirect: the attack rides in third-party content your system ingests (a web page, an inbound email, a PDF) and fires when the model reads it.
The difference
Direct: the attacker is the user, typing the attack. Indirect: the attack rides in third-party content your system ingests (a web page, an inbound email, a PDF) and fires when the model reads it. Indirect is the dangerous one, because your user is the victim, not the attacker.
Entry: Direct vs indirect injection →