Can CaMeLs Talk? Securing Multi-Agent Systems Against Indirect Prompt Injection Attacks
This work constructs a concrete prompt-injection attack that succeeds despite all constituent agents individually operating CaMeL, and introduces multi-CaMeL, an agent-to-agent communication protocol that preserves provenance across agent boundaries by separating trusted natural-language instructions from untrusted dat...