Rule set sha256:2dd04f614be2

PROMPT_SECURITY_INDIRECT_INJECTION_AI_ADDRESSED_DIRECTIVE_001

One rule of the rule set with digest 2dd04f614be27ad02c913058bc1c1818342ff069ca53753b390042a3b2cdc95d. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.

RulePROMPT_SECURITY_INDIRECT_INJECTION_AI_ADDRESSED_DIRECTIVE_001
Rule versiondf6131e0b953256618480aa4da334a8559328a29b1338f3894d04ef4ba0b6fde
ProvisionRegulation (EU) 2024/1689, Article 15(5)
ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj
ApprovalNot approved

rules/regulations/universal/prompt_security/indirect_injection_ai_addressed_directive.yaml

Citation
Regulation (EU) 2024/1689 (EU AI Act), Article 15(5): "High-risk AI systems shall be resilient against attempts by unauthorised third parties to alter their use, outputs or performance by exploiting system vulnerabilities. The technical solutions aiming to ensure the cybersecurity of high-risk AI systems shall be appropriate to the relevant circumstances and the risks."
Condition
Detects indirect prompt injection where untrusted content directly addresses the AI ("attention AI assistant", "note to any language model") to smuggle instructions through retrieved data. EU AI Act Article 15. OWASP LLM01.
Condition type
regex
Status in the file
No status recorded.