Indirect PI — System Sabotage via Destructive Shell Command - ATR-2026-00711 (96e95c6e-5826-565f-8c13-0b3328eaa1e4)
Detects indirect prompt injection payloads that instruct a computer-use agent to execute destructive shell commands: kernel removal, firewall deactivation, deletion of development environments or boot files, system cleanup commands embedded in downloaded files (bash guide.sh). The payload is typically delivered via a malicious webpage or file that the agent downloads and renders. Source: indirect-pi-system-sabotage (VPI corpus, cua-framework).