AML.T0061
LLM Prompt Self-Replication
Description
An adversary may use a carefully crafted LLM Prompt Injection designed to cause the LLM to replicate the prompt as part of its output. This allows the prompt to propagate to other LLMs and persist on the system. The self-replicating prompt is typically paired with other malicious instructions (ex: LLM Jailbreak, LLM Data Leakage).
Honesty-tier rationale
Persistence needs durable tampering with real model weights or infrastructure; the mechanism can be shown, but real persistence cannot be faked in a browser.