@misc{indiciae1a6f58370dd4,
  title = {When AI Meets the Web: Prompt Injection Risks in Third-Party AI Chatbot Plugins},
  author = {Yigitcan Kaya and Anton Landerer and Stijn Pletinckx and Michelle Zimmermann and Christopher Kruegel and Giovanni Vigna},
  year = {2025},
  url = {https://arxiv.org/abs/2511.05797},
  note = {Source identifier: 2511.05797}
}