No-Box Vulnerability Analysis: Description-only Detection of Indirect Prompt Injection Vulnerabilities in MCP Servers
This work proposes a new paradigm of no-box vulnerability analysis in which neither access nor runtime interaction is available, and only functionality metadata is available, and introduces no-box vulnerability analysis as a new analysis paradigm and demonstrates its practical feasibility in realistic systems.
Ze-Hua Zhang, Jie Hu, Pratham Hegde et al.
· 0 citations