pikit: A Composable Toolkit for Indirect Prompt Injection Research and Evaluation

arXiv:2609.36817 · cs.CR · Submitted 2026-09-29 · Read on arXiv

cs.CR

Submitted: 2026-09-29

Updated: 2026-09-29

Code: https://github.com/Tencent/AI-Infra-Guard

Terminology

Core — 7× in this paper · explained in 2 episodes
Attack Success Rate — 6× in this paper
Trace — 6× in this paper · explained in 2 episodes
Benchmark — 4× in this paper · explained in 2 episodes
Benchmarking — 4× in this paper · explained in 4 episodes
Abstraction — 3× in this paper · explained in 1 episode
Attack Success Rate (ASR) — 2× in this paper · explained in 2 episodes
Decoupling — 2× in this paper · explained in 2 episodes
F1 Score — 2× in this paper · explained in 3 episodes
AI Agents — 1× in this paper · explained in 2 episodes
Agent Architectures — 1× in this paper · explained in 1 episode
Agent Harness — 1× in this paper · explained in 2 episodes
Agentic AI — 1× in this paper · explained in 1 episode
Agentic Coding — 1× in this paper · explained in 1 episode
RAG — 1× in this paper · explained in 3 episodes
Reasoning Traces — 1× in this paper · explained in 3 episodes
Sparsity — 1× in this paper · explained in 4 episodes
Transformer — 1× in this paper · explained in 2 episodes
Transformer Architecture — 1× in this paper · explained in 2 episodes
Unified Framework — 1× in this paper · explained in 5 episodes

Sources

Related papers