{
 "generated": "2026-11-01",
 "node": {
  "id": "layer:agent-security--2",
  "type": "Layer",
  "name": "提示词注入",
  "slug": "agent-security--2",
  "map": "agent-security",
  "map_title": "Agent 安全攻击面",
  "num": 2,
  "step": "Layer 02",
  "role": "恶意指令混进 Agent 读取的内容里（网页、邮件、日历邀请、文件），让 Agent 把攻击者的话当成用户指令执行。 这是目前唯一一类已经积累了大量真实、已修复生产事故的攻击面 ，几乎每个头部厂商的 Agent 产品都中过招。",
  "n_cards": 7,
  "page": "/landscape/agent-security/#layer-2",
  "degree": 0
 },
 "page": "https://xiaopingfeng.com/graph/e/layer/agent-security--2/",
 "out": [],
 "in": [
  {
   "type": "placed_in",
   "sentence": "EchoLeak出现在 Landscape 的「提示词注入」",
   "direction": "in",
   "id": "event:echoleak",
   "name": "EchoLeak（CVE-2025-32711）",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」：卡片「EchoLeak（CVE-2025-32711）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-echoleak"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "CamoLeak出现在 Landscape 的「提示词注入」",
   "direction": "in",
   "id": "event:camoleak",
   "name": "CamoLeak（GitHub Copilot Chat）",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」：卡片「CamoLeak（GitHub Copilot Chat）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-camoleak"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "GitHub Copilot / VS Code RCE出现在 Landscape 的「提示词注入」",
   "direction": "in",
   "id": "event:copilot-vscode-rce",
   "name": "GitHub Copilot / VS Code RCE（CVE-2025-53773）",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」：卡片「GitHub Copilot/VS Code RCE（CVE-2025-53773）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-copilot-rce"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Perplexity出现在 Landscape 的「提示词注入」",
   "direction": "in",
   "id": "org:perplexity",
   "name": "Perplexity",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」：卡片「Perplexity Comet 浏览器注入（两轮）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-comet-injection"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Perplexity Comet 浏览器注入出现在 Landscape 的「提示词注入」",
   "direction": "in",
   "id": "event:perplexity-comet-prompt-injection",
   "name": "Perplexity Comet 浏览器注入（两轮）",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」：卡片「Perplexity Comet 浏览器注入（两轮）」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-comet-injection"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "OpenAI出现在 Landscape 的「提示词注入」",
   "direction": "in",
   "id": "org:openai",
   "name": "OpenAI",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」：卡片「OpenAI 加固 ChatGPT Atlas」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-atlas-hardening"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "OpenAI 加固 ChatGPT Atlas出现在 Landscape 的「提示词注入」",
   "direction": "in",
   "id": "event:openai-atlas-injection-hardening",
   "name": "OpenAI 加固 ChatGPT Atlas",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」：卡片「OpenAI 加固 ChatGPT Atlas」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-atlas-hardening"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Anthropic出现在 Landscape 的「提示词注入」",
   "direction": "in",
   "id": "org:anthropic",
   "name": "Anthropic",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」：卡片「Anthropic Claude for Chrome 红队数据」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-claude-chrome"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Anthropic Claude for Chrome 红队数据出现在 Landscape 的「提示词注入」",
   "direction": "in",
   "id": "inst:claude-for-chrome-red-team-data",
   "name": "Anthropic Claude for Chrome 红队数据",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」：卡片「Anthropic Claude for Chrome 红队数据」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-claude-chrome"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Microsoft出现在 Landscape 的「提示词注入」",
   "direction": "in",
   "id": "org:microsoft",
   "name": "Microsoft",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」：卡片「Microsoft Copilot\"拒绝话术\"侧信道」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-copilot-refusal-leak"
    }
   ]
  },
  {
   "type": "placed_in",
   "sentence": "Microsoft Copilot“拒绝话术”侧信道出现在 Landscape 的「提示词注入」",
   "direction": "in",
   "id": "event:copilot-refusal-leak-autorun",
   "name": "Microsoft Copilot“拒绝话术”侧信道",
   "reported": false,
   "status": "derived",
   "evidence": [
    {
     "kind": "own",
     "label": "本站页面",
     "text": "Landscape「Agent 安全攻击面」第 02 层「提示词注入」：卡片「Microsoft Copilot\"拒绝话术\"侧信道」",
     "url": "https://xiaopingfeng.com/landscape/agent-security/#player-copilot-refusal-leak"
    }
   ]
  }
 ]
}