Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems

Proposes a black-box attack that decomposes indirect prompt injection into trigger and attack fragments to study end-to-end IPI exploits under natural queries across RAG and agentic systems.