
What is prompt injection? How it reaches AI through documents
Learn how prompt injection can reach AI through external documents, what the warning signs mean and which layered checks can reduce risk before use.
Read guideBrowse by topic
Checks, boundaries and review decisions to apply before an outside file becomes part of an AI project.
In this topic
Articles can appear here while keeping their primary category, so related guidance stays discoverable across the library.
1 guide · 17 articles

Learn how prompt injection can reach AI through external documents, what the warning signs mean and which layered checks can reduce risk before use.
Read guide
Learn how AI tools access files through chat uploads and coding-agent workspaces, what each route exposes, and which checks belong before AI use.
Read article
Check current ChatGPT file upload limits, supported document types and the separate caps for files, images, spreadsheets, Projects and storage.
Read article
Fix common ChatGPT file upload errors by checking format, size, rate and storage limits, service status, browser state and workplace network controls.
Read article
Learn when ChatGPT can read PDF text, scanned pages, charts and embedded images, why plan and upload route matter, and how to check the result.
Read article
Check current Gemini Apps file upload limits for documents, media, ZIPs, code folders and repositories, plus the caveats that affect analysis.
Read article
Check current Claude.ai file upload limits, supported document and image types, PDF handling, chat caps and the separate rules for Project files.
Read article
Understand what the Codex sandbox isolates, how its modes differ from approval policy, and what files, writes and network access still require review.
Read article
Learn how Codex permissions control local file and network access, how profiles differ from legacy sandbox settings, and where document checks fit.
Read article
Understand how the Claude Code sandbox constrains Bash, how auto-allow differs from permissions, and which file and network exposures still need attention.
Read article
Learn how Claude Code permissions, modes and working-directory rules govern file access, and how those controls complement its Bash sandbox.
Read article
Learn how to check a document for prompt-injection signals, assess coverage and limits, and decide whether it should enter an AI workflow.
Read article
Understand hidden prompts in CVs and resumes, what early evidence shows, and how recruiters can review documents before AI-assisted screening.
Read article
Learn how hidden or machine-readable PDF content can reach AI workflows, what current detection research shows, and how to review a PDF before use.
Read article
See harmless prompt injection examples from documents and AI workflows, learn what each pattern tries to change and understand the right next step.
Read article
See what current studies show about hidden prompts in research papers, where the evidence stops, and how to check papers before AI-assisted review.
Read article
Learn how indirect prompt injection travels from external documents into AI context, how it differs from direct injection and which controls reduce risk.
Read article
Prepare documents for RAG with a practical checklist for selection, permissions, parsing, metadata, versioning, chunking, testing and ingestion.
Read article