HIGHCWE-918
PI-006 Indirect Injection via URL
Prompt Injection — Attempts to manipulate agent behavior via malicious input
Description
Tests if agent follows instructions from external content
Remediation
Validate URLs against allowlist. Sanitize fetched content. Do not execute instructions from external sources.
Run this test
$ npx hackmyagent attack --payload PI-006