Skip to content

Hide Navigation Hide TOC

Output Emoji-Substitution Hijack of the Response - ATR-2026-01902 (a09d25ba-983a-5b1a-b074-777d2a607a1d)

Detects indirect-injection instructions that force the agent to replace its response words with emojis (full or keyword substitution), a lossy-encoding evasion of output content checks. Anchored to the output target to avoid firing on legitimate 'add an emoji' formatting requests.

Cluster A Galaxy A Cluster B Galaxy B Level
Output Emoji-Substitution Hijack of the Response - ATR-2026-01902 (a09d25ba-983a-5b1a-b074-777d2a607a1d) Agent Threat Rules External Harms (ba500f0e-52ca-40ff-aed4-e6dbf00cca10) MITRE ATLAS Attack Pattern 1
Output Emoji-Substitution Hijack of the Response - ATR-2026-01902 (a09d25ba-983a-5b1a-b074-777d2a607a1d) Agent Threat Rules LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern 1