The 30-second CANARY-7X9Q prompt-injection canary test, with the 7-trigger-phrase blocklist, now lives as Check 5 in the suite. AI Agents 2026 readers are redirected automatically.
— Ingenious AI security check.
To the suite: Check 5 — the Rogue-Agent Defense 30-second canary test plus the 7-trigger-phrase blocklist (Forcepoint's 10 wild payloads, October 2026). This page redirects you automatically; use the link below if it does not.
A placeholder page that forwards you to the current version of a check — used here because the ten platform self-checks were merged into one suite page.
Redirecting you now…
Prompt injection is an attack that tricks an AI system into following instructions from an untrusted source. It works because LLMs process everything — your request, tool outputs, web pages, files — as one text stream, so the model can mistake attacker-planted text for orders it should obey.
Direct prompt injection is typed straight at the model by the user — the classic “ignore previous instructions”. Indirect prompt injection hides the instructions in content the model reads on your behalf — a web page, email, document, or file — so the attack arrives through the data channel instead of the chat box.
OWASP ranks prompt injection as LLM01 — the number-one risk for LLM applications in its LLM Top 10, covering both direct and indirect prompt injection. It has held that position for two years running.
Ingenious AI publishes 21 live security platforms, and 100% of them run on permanent getingeniousai.com domains.