Glossary
Prompt Injection
An attempt to make an AI system follow untrusted instructions that conflict with its intended rules.
Reviewed as part of Prompt Injection and Data Leakage in Finance AI Tools, using the primary references listed below. Updated 2026-07-19.
Plain-English meaning
Prompt Injection is used here to describe an attempt to make an ai system follow untrusted instructions that conflict with its intended rules. In the daily board, the word is grouped by the role it performs rather than by spelling or market popularity.
You may encounter it in a product interface, technical document, risk report, policy paper, or market dashboard. The term is included for recognition and comparison, not as a product recommendation.
Important boundary
Prompt injection describes the attack pattern; data leakage is one possible consequence.
When this word appears in a report, identify the mechanism being described before treating the label as a conclusion. Similar terms can point to different causes, controls, or outcomes.
Why it belongs with AI Agent Building
These terms explain how agents are composed, grounded, and protected against common attacks.
When solving the puzzle, compare the job this term performs with nearby cards. A correct group usually shares a function, risk type, workflow, or market structure rather than simply sharing similar wording.
Where you might see it
You might encounter this term while reading educational explainers, product documentation, risk disclosures, market dashboards, or beginner guides. Always separate vocabulary learning from financial decision-making.
Reading cue
When a document becomes an instruction instead of evidence
Use the full guide's applied scenario to ask where Prompt Injection enters the process, what evidence supports it, and which nearby concept it could be confused with.
Read the complete applied scenarioNearby concepts
Compare before you memorize
Direct prompt injection
A user instruction that attempts to override intended behavior.
It comes through the direct interaction rather than a retrieved external source.Indirect prompt injection
Malicious instructions embedded in documents, pages, or tool output.
The attacker may never interact directly with the assistant.Data leakage
Sensitive information reaching an unauthorized output or destination.
Injection is one possible cause; excessive access or logging can cause leakage too.Least privilege
Giving each component only the access needed for its task.
It limits impact even when model behavior cannot be perfectly predicted.Knowledge check
Check the distinction
Why is retrieved text untrusted even when the website looks legitimate?
The content can be changed, compromised, user-generated, or designed to influence the model.
Source trail
References behind this explanation
These references support the surrounding guide and concept boundaries. Open the full source when you need the original technical or policy context.