Found 1 of 526 papers
The paradox: LLMs get hijacked through external text, and the same LLM can scan that text. PromptArmor lets you use any language model as a security guard for itself: no fine-tuning, no setup, no API keys. The trick: first ask the model to find hidden commands in the text, then give it the cleaned text for the main task, and the success rate of prompt injection attacks drops to <1% instead of the typical 70-80%.