Title: Discussion 11 — Attack Your Own Capstone
Course: AIINFRA 303: Capstone Project > Section: Week 11 — Security, Guardrails, and Responsible-AI Hardening

💬 Discussion 11 — Attack Your Own Capstone (20 pts)

Write one indirect prompt injection attack targeting your own capstone project. Describe the specific data source your capstone retrieves from without a human directly reviewing it first (a scraped webpage, an uploaded document, a tool's returned output, an email, etc.), and write the exact malicious instruction you would hide inside that content to try to hijack your agent's behavior. Then walk through your own defense-in-depth stack control by control and be honest about which of your guardrails would stop this attack, and which wouldn't. If you find a gap, say so — identifying your own weakness here is worth more credit than claiming a clean sweep. Post your attack and analysis, then respond to at least two classmates — try to find a way their stated defenses might still miss their own attack, or suggest an additional control (input rail, output rail, permission scoping, human approval gate) that would close the gap they identified.