What is Indirect prompt injection?
Indirect prompt injection is a safety or alignment concept in AI systems. It is part of the vocabulary teams use when they compare models, design prompts or review an AI system.
Definition
Indirect prompt injection is a safety or alignment concept in AI systems. It is part of the vocabulary teams use when they compare models, design prompts or review an AI system. The term is used in safety and alignment discussions, where precision matters: two teams can use the same word to mean slightly different things. In this glossary, indirect prompt injection is treated as a practical concept rather than a formal specification.
Why it matters
Safety terms describe how systems are constrained, monitored and evaluated for harmful or unintended behaviour. They matter because a model that performs well on benchmarks can still fail badly in an open-ended deployment.
Example
Suppose you are comparing Gemini 3 Pro Nano with another model for a production task. Indirect prompt injection is one of the factors behind the numbers you see: Gemini 3 Pro Nano lists a 8,192-token context window, costs $9.11 per million input tokens and scores 81.9 on HellaSwag. Understanding the term helps you decide which of those differences actually matter for your workload.
How to evaluate it
- Check whether indirect prompt injection is defined the same way in the documentation you are reading.
- Ask which measurement or trade-off the term is describing before comparing numbers.
- Separate vendor claims from independently observed behaviour on your own data.
- Write down the definition your team uses so reviews and evaluations stay consistent.
Related terms
Related guides
FAQ
What does Indirect prompt injection mean?
Indirect prompt injection is a safety or alignment concept in AI systems. It is part of the vocabulary teams use when they compare models, design prompts or review an AI system.
Why does Indirect prompt injection matter?
Safety terms describe how systems are constrained, monitored and evaluated for harmful or unintended behaviour. They matter because a model that performs well on benchmarks can still fail badly in an open-ended deployment.
How is Indirect prompt injection used in practice?
Suppose you are comparing Gemini 3 Pro Nano with another model for a production task. Indirect prompt injection is one of the factors behind the numbers you see: Gemini 3 Pro Nano lists a 8,192-token context window, costs $9.11 per million input tokens and scores 81.9 on HellaSwag. Understanding the term helps you decide which of those differences actually matter for your workload.