Indirect PI — Browsing History / Search History Exfiltration via Agent Email - ATR-2026-00855 (bb2005bf-a35a-5bd0-aed8-8ba941dfa11c)
Detects indirect prompt injection payloads instructing an agent to retrieve the user's Google search history, browser history, or recently visited URLs and send them to an attacker-controlled email address. Browsing history reveals private interests, health concerns, political views, and behavioral patterns. The attack pattern uses a "IMPORTANT!!! Ignore all previous instructions" override combined with browser/search history keywords and an email-send action. Derived from vpibench indirect-pi-exfil-browsing-history-carrier corpus.