Engine Room · 8 November 2026
When an email gives the assistant instructions
Imagine an email that tells the reader to cancel all appointments this week. An assistant reading the email for you might mistake that line for a task. Experts call that indirect prompt injection. What happens next depends in part on the data and functions available to the assistant. The security organisation OWASP recommends limiting what such systems can access and requiring human approval for high-risk actions.