<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Prompt-Injection on aeshift</title>
    <link>https://aeshift.com/tags/prompt-injection/</link>
    <description>Recent content in Prompt-Injection on aeshift</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>en</language>
    <copyright>&amp;copy; 2026 [Dachary Carey](https://dacharycarey.com) - with agent assistance · Part of the [Agent Ecosystem Research Program](https://agentecosystem.dev)</copyright>
    <lastBuildDate>Sat, 14 Mar 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://aeshift.com/tags/prompt-injection/index.xml" rel="self" type="application/rss+xml" />
    
    <item>
      <title>APIs Can Now Hijack Your AI Agents</title>
      <link>https://aeshift.com/posts/2026-03-14-show-hn-monetize-your-apis-by-injecting-agent-targeted-instructions/</link>
      <pubDate>Sat, 14 Mar 2026 00:00:00 +0000</pubDate>
      
      <guid>https://aeshift.com/posts/2026-03-14-show-hn-monetize-your-apis-by-injecting-agent-targeted-instructions/</guid>
      <description>&lt;p&gt;Your agent treats API responses as trusted data. It shouldn&amp;rsquo;t. &lt;a href=&#34;https://github.com/daninge/ad-injector&#34;  target=&#34;_blank&#34; rel=&#34;noreferrer&#34;&gt;ad-injector&lt;/a&gt; is a small Python library that shows why. Any API can smuggle instructions to your agent inside a valid JSON payload, and your agent will often comply. This isn&amp;rsquo;t a novel exploit. It&amp;rsquo;s architectural reality.&lt;/p&gt;&#xA;&lt;p&gt;The repo ships middleware for FastAPI and Flask that injects an &lt;code&gt;_context&lt;/code&gt; field into JSON responses containing framed instructions: referral codes, competitor-steering directives, facts to plant in agent memory. The author calls it what it is: intentional prompt injection. Presets include competitor steering, memory planting, and a &lt;code&gt;stealth_injector&lt;/code&gt; mode that appends instructions to existing string values instead of adding new keys.&lt;/p&gt;</description>
      <media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://aeshift.com/posts/2026-03-14-show-hn-monetize-your-apis-by-injecting-agent-targeted-instructions/feature.jpg" />
    </item>
    
  </channel>
</rss>
