Evidence · DiggingBeagle record
Where You Inject Matters: prompt-injection location and success
Controlled comparisons of identical prompt payloads placed in repository instructions, source code, or tool data.
- Published
- Oct 30, 2026
- Source role
- primary disclosure
Evidence record
Controlled comparisons of identical prompt payloads placed in repository instructions, source code, or tool data.
Claim-level citations (1)
- supportsMoving the same prompt injection between README and code changed agent behavior: The paper measured higher prompt-injection success for selected README or TODO placements than for the same payload in code/data in a controlled coding-agent setup.
arXiv:2610.38867, placement ablation and comparison tables for README/TODO versus code/data