Authors

Zonghao Ying

Publications 2

Preprint Open access

pikit: A Composable Toolkit for Indirect Prompt Injection Research and Evaluation

Zonghao Ying, Xiangfan Wu, Bo Yang et al. · 2026

Indirect prompt injection embeds malicious instructions within external content retrieved by LLM-based agents, altering target behavior without user authorization. We introduce pikit, a research toolkit designed to systematically evaluate these threats across three core dimensions: attacks (13 methods), channels (16 ca …

Preprint Open access

CoDeL: Co-Evolutionary Defense against Indirect Prompt Injection in LLM-based Agents

Xiao Yang, Yangchen Ou, Yuhan Gao et al. · 2026

Large language model (LLM)-based agents increasingly rely on external tools and content, exposing them to indirect prompt injection (IPI). This threat has motivated a wide range of defenses, among which training-based defenses are often regarded as most reliable. However, existing training-based defenses are typically …

Co-authors

Xiangfan Wu Bo Yang Huiyu Wu Xing Zheng Huangsheng Cheng Xiaorong Shi Jing Guo Xiao Yang Yangchen Ou Yuhan Gao Le Wang Aishan Liu