The COMPEL Glossary Graph visualizes relationships between framework terminology, showing how concepts interconnect across domains, stages, and pillars. Term nodes cluster by pillar affiliation while cross-references reveal semantic dependencies — for example, how risk appetite connects to control effectiveness, model governance, and assurance requirements. This network representation helps practitioners navigate the framework vocabulary and understand that COMPEL terminology forms a coherent conceptual system rather than isolated definitions.
COMPEL Glossary / indirect-prompt-injection
Indirect prompt injection
Prompt injection delivered through content the model retrieves or ingests — emails, documents, web pages, or tool outputs — rather than through a direct user message.
What this means in practice
The attacker controls the content, not the prompt field, which makes detection and mitigation distinct from direct injection.
Synonyms
cross-domain prompt injection , XPIA , content-borne injection
See also
- Jailbreak — A user-crafted prompt pattern that bypasses a model's safety training to elicit restricted behavior.