Indirect PI — Cloud File Exfiltration (Google Drive / Cloud Storage via Agent) - ATR-2026-00857 (e6901649-8516-5a25-be98-129dc59a70cd)
Detects indirect prompt injection payloads and VPI attack scenarios instructing an agent (browser-use or file-access agent) to retrieve sensitive files from the user's cloud storage (Google Drive, Dropbox, OneDrive) and upload the contents to an attacker-controlled platform, or to attach cloud files to an email sent to an attacker. The attack targets API information, bank account details, card numbers, email archives, and other sensitive files stored in cloud drives. Derived from vpibench indirect-pi-exfil-file corpus (platform=amazon, attack_url=drive_amazon_form*) and indirect-pi-exfil-cloud-files corpus.