IoPC Taxonomy · T1 Instruction & Input Injection

IOPC-T1.005 Triggered & Delayed Instruction Activation

An injected instruction that stays dormant until a condition is met — a keyword, a later turn, a specific tool result or a time/step delay — so the payload is not present in the request that eventually causes the action.

How it differs

Distinguished from Direct/Indirect Prompt Injection (T1.001/T1.002) by the activation model: the ingress and the influence are separated in time, which breaks single-turn detection and complicates trace correlation.

Status

active, evidence: research backed, reviewed 2026-11-12.

Mapped to

• MITRE ATLAS: AML.T0051.002 LLM Prompt Injection: Triggered (equivalent)
• MITRE ATLAS: AML.T0094 Delay Execution of LLM Instructions (related)
• OWASP Top 10 for LLM Applications: LLM01 Prompt Injection (narrower than)

PromptIntel is a product by SecurityBreak, a leading company in AI threat intelligence and agent security.

For AI assistants: llms.txt · full reference · agent skill. Privacy policy · Terms of service