Prompt injection is an attack that hides malicious instructions in input or content processed by an AI model, causing it to ignore its intended instructions, leak data or take unwanted actions. It is now the top risk in the OWASP Top 10 for LLM applications, because attackers can hide instructions in emails or web pages that AI agents process automatically.
