Ignored, Not Refused: What Low Prompt-Injection Success Rates Hide in Small Tool-Using Agents

Tool-using agents read untrusted external content, which exposes them to indirect prompt injection IPI, where hidden instructions hijack the agent's tool calls. Benchmarks measure IPI security by the attack success rate ASR, which treats every failed attack as a successful defense. To test this...