Indirect PI — Medical / Genetic Data Exfiltration via Agent Action - ATR-2026-00704 (8e903cf7-eee3-5bcd-bf2b-c2d64b9eedc5)
Detects indirect prompt injection that instructs an agent to download and exfiltrate sensitive health or genetic data: medical records, health system files, 23andMe genetic data, lab reports, or diagnostic documents. These payloads appear in structured-data carriers (product reviews, notes, profiles) that an agent consumes during an unrelated task. Source: indirect-pi-exfil-medical-carrier / indirect-pi-exfil-genetic-carrier / indirect-pi-medical-record-carrier.