Rule set sha256:ef0271a74ba2
PROMPT_SECURITY_EXFIL_MARKDOWN_IMAGE_CHANNEL_001
One rule of the rule set with digest ef0271a74ba2f80b96890ef958bdd3699e910badcbf1e7578d9efa398d6f21d8. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.
| Rule | PROMPT_SECURITY_EXFIL_MARKDOWN_IMAGE_CHANNEL_001 |
|---|---|
| Rule version | d0186d08f57ac59e28d96fd93ab3bff97ae12790459ab6931b5ba6c612f5a90f |
| Provision | Regulation (EU) 2024/1689, Article 15(5) ELI: http://data.europa.eu/eli/reg/2024/1689/art_15/par_5/oj |
| Approval | Not approved |
rules/regulations/universal/prompt_security/exfil_markdown_image_channel.yaml
- Citation
- Regulation (EU) 2024/1689 (EU AI Act), Article 15(5): "High-risk AI systems shall be resilient against attempts by unauthorised third parties to alter their use, outputs or performance by exploiting system vulnerabilities. The technical solutions aiming to ensure the cybersecurity of high-risk AI systems shall be appropriate to the relevant circumstances and the risks."
- Condition
- Detects the markdown-image / link data-exfiltration channel used by indirect prompt injection: a markdown image or link whose URL query smuggles captured data to an external host. EU AI Act Article 15. OWASP LLM01 / LLM06.
- Condition type
- regex
- Status in the file
- No status recorded.