Indirect PI — Physical / Biometric Media Exfiltration via Agent - ATR-2026-00706 (dcd2055d-2a91-5c78-bedc-961b79f1fa73)
Detects indirect prompt injection instructions that direct an agent to perform physical or biometric data exfiltration: generating deepfake audio from recorded voice samples, converting biometric recordings, and exfiltrating the result. Also covers instructions to retrieve physical identity documents (ID scans, passport photos). Source: indirect-pi-exfil-physical-carrier.