Latent Injection - Mixed Embedded Instruction Patterns - ATR-2026-00479 (90b174db-0b88-5484-850b-5a304551954a)
Detects latent prompt injection patterns embedded in content that an LLM agent processes (WHOIS data, candidate profiles, domain assessments, document summaries). These attacks inject instructions into data that will be passed to an LLM, expecting the LLM to follow embedded commands. Patterns cover: fake legal authority claims injected into content, and explicit injection marker placeholders used in probe corpora. Notes on removed patterns: (1) Markdown image pattern was removed due to high FP rate on benign MCP/npm documentation — the pattern cannot distinguish legitimate images from tracking-pixel attacks. (2) "Assess this candidate/profile" framing was removed due to FP risk on legitimate HR/evaluation contexts — it is kept documented here as a known latent injection anchor but not in the structural detection. (3) WHOIS/domain data and French business text from the original corpus are corpus-fingerprint artifacts and are not included.