- In short
- Direct injection is injected instruction that arrives directly from the user, so it targets input screening; indirect injection is instruction smuggled in through content the system itself retrieves or receives from a tool, so it bypasses input screening entirely because it never appears in the original user message. Both require the same class of classifier, but it must be applied at different points in the pipeline, and a retrieved document is not automatically trustworthy just because the system fetched it.
Full concept guide coming soon
We are building the in-depth, exam-aligned guide for this knowledge point. In the meantime, explore the prerequisites and related concepts below, watch the official Anthropic Academy lessons, and start an adaptive study session to master it with Archie.
Watch and learn
Official Anthropic Academy lessons first, then hand-picked walkthroughs. Videos load only when you press play.
No videos curated for this concept yet
We are still curating the best official and community videos for this topic.
References & primary sources
Adaptive study
Master this concept with Archie
Practice it inside an adaptive study session. Archie, your Socratic AI tutor, tracks your mastery with Bayesian Knowledge Tracing and schedules the perfect next review.