Evidence · DiggingBeagle record
Study of steganographic prompt instructions across multimodal tool conversion
Study of steganographic prompt instructions across multimodal tool conversion
- Source role
- primary disclosure
Evidence record
Study of steganographic prompt instructions across multimodal tool conversion
Claim-level citations (2)
- supportsDecoded image payloads become agent instructions after an email tool step: A 24-payload mediated MCP test compared an undefended pipeline at 100 percent successful attacker instructions with keyword and regex filters permitting 62.5 percent, while the studied provenance ledger and sink policy blocked all 24.
Abstract, steganographic carriers and 24 adaptive payloads
- supportsDecoded image payloads become agent instructions after an email tool step: The authors report image LSB, DCT and metadata instruction encodings decoded through agent tools, with 24 controlled attack payloads. Their mediated enforcement prototype blocked tested malicious sink actions, unlike text keyword filtering.
Abstract; image decoding attack setup; 24-payload evaluation and provenance policy