{"id":"https://openalex.org/W7225804302","doi":"https://doi.org/10.5281/zenodo.24130000","title":"Laundered by Summary: Indirect Prompt Injection Across Summariser Agents","display_name":"Laundered by Summary: Indirect Prompt Injection Across Summariser Agents","publication_year":2026,"publication_date":"2026-11-11","ids":{"openalex":"https://openalex.org/W7225804302","doi":"https://doi.org/10.5281/zenodo.24130000"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.24130000","doi":"https://doi.org/10.5281/zenodo.24130000","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24130000","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.24130000","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5147299814","display_name":"H\u00e9ctor P\u00edo-Rend\u00f3n Gutmann","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"P\u00edo-Rend\u00f3n Gutmann, H\u00e9ctor","raw_affiliation_strings":["Independent researcher"],"raw_orcid":"https://orcid.org/0009-0007-5730-3490","affiliations":[{"raw_affiliation_string":"Independent researcher","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5147299814"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9286999702453613,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9286999702453613,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.007300000172108412,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.006200000178068876,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5533000230789185},{"id":"https://openalex.org/C554936623","wikidata":"https://www.wikidata.org/wiki/Q199657","display_name":"Reading (process)","level":2,"score":0.5449000000953674},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5370000004768372},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.477400004863739},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.39419999718666077},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.3310999870300293},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.27140000462532043},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.26930001378059387},{"id":"https://openalex.org/C2776235265","wikidata":"https://www.wikidata.org/wiki/Q18392052","display_name":"Fragment (logic)","level":2,"score":0.2605000138282776},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.257999986410141},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.25540000200271606}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.24130000","doi":"https://doi.org/10.5281/zenodo.24130000","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24130000","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.24130001","doi":"https://doi.org/10.5281/zenodo.24130001","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24130001","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.5281/zenodo.24130000","doi":"https://doi.org/10.5281/zenodo.24130000","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24130000","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Multi-agent":[0],"pipelines":[1],"often":[2,124],"separate":[3],"reading":[4],"from":[5],"acting:":[6],"a":[7,16,121],"summariser":[8],"without":[9,72],"tools":[10],"reads":[11],"untrusted":[12,105],"content":[13],"and":[14,45,85,132],"writes":[15],"brief":[17],"for":[18,54,62],"an":[19,26,34],"agent":[20,77,140],"with":[21,40,90],"tools.":[22],"We":[23],"test":[24],"whether":[25],"injected":[27],"request":[28,119],"to":[29,33,42,100,135],"e-mail":[30,81],"the":[31,75,80,111,118,130],"answer":[32],"outside":[35],"address":[36],"survives":[37],"this":[38,107],"hand-over,":[39],"zero":[41],"three":[43,94],"summarisers":[44,99],"five":[46],"open":[47],"models":[48],"in":[49,82],"two":[50],"experiments.":[51],"Summarisers":[52,59],"asked":[53,61],"facts":[55],"stopped":[56,137],"it":[57,66],"completely.":[58],"also":[60],"\"action":[63],"items\"":[64],"passed":[65],"on":[67],"as":[68,104,120],"their":[69],"own":[70],"task,":[71],"its":[73],"source;":[74],"acting":[76,139],"then":[78],"sent":[79],"15.7":[83],"%":[84,87],"32.5":[86],"of":[88],"chains,":[89],"no":[91],"decay":[92],"over":[93],"summaries.":[95],"A":[96],"prompt":[97],"telling":[98],"mark":[101],"such":[102],"requests":[103],"ended":[106],"laundering":[108],"but":[109],"not":[110,134],"sending":[112],"(27.4":[113],"%):":[114],"labels":[115],"that":[116,128],"repeated":[117],"command":[122],"were":[123],"followed,":[125],"while":[126],"briefs":[127],"named":[129],"injection":[131],"said":[133],"act":[136],"every":[138],"tested.":[141]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-11-12T00:00:00"}