InjecAgent

Key findings

• 1,054 test cases across 17 user tools and 62 attacker tools - ReAct-prompted GPT-4 was vulnerable 24% of the time, rising to 47% with a hacking prompt

Sources

• arxiv.orghttps://arxiv.org/abs/2403.02691