Prompt InjectionTier 4high
Prompt Injection: Delimiter Escape
Direct and indirect instruction override attacks
The delimiter escape technique exploits the way AI systems parse structured prompts. By inserting fake system-level delimiters, attackers can inject instructions that appear to come from a trusted source.
Attack Details
- Attack ID
- APWN-PI-004
- HMA Check
- PROMPT-004
- Delivery Methods
- json-ld, meta-tag, invisible-span
- CWE
- CWE-74
- OASB Control
- 3.3
- Severity
- high
Remediation
If your AI agent is vulnerable to this attack, scan and fix with:
npx hackmyagent secure --check PROMPT-004