Indirect PI — File Exfiltration Combined with Destroy or Tamper - ATR-2026-00707 (91fe08f3-75c1-5e91-997a-2a40eee44cd9)
Detects indirect prompt injection payloads that instruct an agent to perform a two-stage attack: first exfiltrate a file (API keys, bank details, card info) from cloud storage, then either delete or edit/tamper with the source file. This combined exfil+destroy or exfil+tamper pattern is more damaging than exfil alone and prevents the victim from noticing the breach via missing files. Source: indirect-pi-exfil-and-destroy / indirect-pi-exfil-and-tamper / indirect-pi-exfil-file (VPI corpus, cua-framework).