Language-Evasion: Multilingual Credential Request - ATR-2026-01013 (315fcf40-817a-5721-8eb2-b0de6eacfe46)
Detects prompt injection via language evasion where the attacker asks for a password, secret key, or other credential in a non-English language (Spanish, French, Italian, German, Japanese, Chinese, Korean, Portuguese, Dutch, Russian, Polish, Turkish, Arabic, Hindi) to bypass English-only keyword detection. The defining carrier is a single-language utterance that translates directly to "What is the password?" or equivalent credential request. ATR-2026-00001 covers some multilingual instruction-override patterns but not bare credential-request translations. This rule fills that gap.