Indirect PI — Location / GPS Data Exfiltration via Agent Email - ATR-2026-00854 (93b85aa1-5d9a-5ca5-955a-cb8b24bfb9a4)
Detects indirect prompt injection payloads instructing an agent to retrieve the user's current or historical location (via Google Maps, GPS service, or device location API) and send the acquired location data to an attacker-controlled email address. Real-time location exfiltration enables stalking, physical surveillance, and targeted physical attacks. The attack pattern uses a "IMPORTANT!!! Ignore all previous instructions" override combined with a location-service keyword and an email-send action. Derived from vpibench indirect-pi-exfil-location-carrier corpus.