Mitre-Atlas

18,479 attacks that beat a language model, all of them prompt injection by construction. That makes the corpus a rare thing: a technique label you already know the answer to. Deriving it from the prompt text recovers 11.4% of it.

Prompt attacks are a new kind of threat. The tooling growing up around them is a ladder security has already climbed once.