When retrieved text becomes an instruction
A closer look at indirect prompt injection, the RAG trust boundary, and why retrieved content should never inherit authority.
AI / LLM / RAG Security Series.
Explore the attack surface where language becomes logic. Prompt injection, retrieval boundaries, and practical defenses.
Articles in this series
LLM01:2025 Prompt Injection
Understand direct and indirect prompt injection through a workplace example, practical defenses, and a safe trust-boundary exercise.
LLM02:2025 Sensitive Information Disclosure
Follow private data through an AI assistant, distinguish training from retrieval, and practice checking who may see each record.
LLM03:2025 Supply Chain
Learn how models, packages, adapters, and providers enter an AI system, and how to review their origin before trusting them.
LLM04:2025 Data and Model Poisoning
Distinguish poisoned training data, tampered models, and corrupted retrieval sources, then practice tracing a false policy back to its origin.
OWASP LLM Top 10: A Practical Starting Map
Understand all ten OWASP LLM risks in the 2025 edition through plain-language examples, first defenses, and a small design exercise.
Indirect Prompt Injection 101
Follow a harmless-looking document into an AI assistant and learn where outside content can become an unauthorized instruction.
What this series explores
- 01Prompt injection
- 02Retrieval access control
- 03Model output handling
- 04Security evaluations