Prompt injection surfaces: what AI teams need to test first

TL;DR: Prompt injection is the #1 vulnerability in AI applications, and Repello AI argues that direct input, retrieved content and tool responses all create exploitable surfaces that can bypass single-turn defenses and enable downstream tool abuse or data exfiltration. The control problem is not blocking every prompt, but governing trust boundaries, tool permissions and blast radius across the full AI context.

Editorial analysis by NHI Mgmt Group, based on content published by Repello AI: “Prompt Injection Testing: A Practical Guide to Finding and Exploiting LLM Injection Vulnerabilities”.

Key questions

Q: What breaks when indirect prompt injection is not controlled in AI systems?

A: Indirect prompt injection breaks the assumption that retrieved content is safe to use as instruction material.

Q: Why do indirect prompt injections create more risk than ordinary prompt errors?

A: Because the attack is embedded in content the agent is already expected to trust.

Q: How should security teams evaluate prompt injection defenses before deploying them in production?

A: Security teams should test prompt injection defenses against realistic attack patterns, not just public benchmark scores.

Practitioner guidance

• Map every injection surface Enumerate direct prompts, retrieval sources, tool outputs, file inputs and cross-channel paths before testing defenses.
• Test indirect injection first Prioritise RAG documents, web pages, email content and database records because those channels are harder to recognise as hostile and often bypass filters that only inspect user prompts.
• Validate tool responses before model use Apply allowlists, schema checks and content sanitisation to every tool response before the agent can reason over it or chain it into another call.

Bottom line: Prompt injection is a boundary failure between data and instruction, which means the control problem extends across retrieval, tools and delegated actions.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →