#select
| agent_instructions.py:9:50:9:89 | BinaryExpr | agent_instructions.py:2:26:2:32 | ImportMember | agent_instructions.py:9:50:9:89 | BinaryExpr | This prompt construction depends on a $@. | agent_instructions.py:2:26:2:32 | ImportMember | user-provided value |
| agent_instructions.py:25:28:25:32 | input | agent_instructions.py:2:26:2:32 | ImportMember | agent_instructions.py:25:28:25:32 | input | This prompt construction depends on a $@. | agent_instructions.py:2:26:2:32 | ImportMember | user-provided value |
| agent_instructions.py:35:28:35:32 | input | agent_instructions.py:2:26:2:32 | ImportMember | agent_instructions.py:35:28:35:32 | input | This prompt construction depends on a $@. | agent_instructions.py:2:26:2:32 | ImportMember | user-provided value |
| anthropic_test.py:17:16:17:37 | BinaryExpr | anthropic_test.py:2:26:2:32 | ImportMember | anthropic_test.py:17:16:17:37 | BinaryExpr | This prompt construction depends on a $@. | anthropic_test.py:2:26:2:32 | ImportMember | user-provided value |
| anthropic_test.py:21:28:21:32 | query | anthropic_test.py:2:26:2:32 | ImportMember | anthropic_test.py:21:28:21:32 | query | This prompt construction depends on a $@. | anthropic_test.py:2:26:2:32 | ImportMember | user-provided value |
| anthropic_test.py:29:16:29:37 | BinaryExpr | anthropic_test.py:2:26:2:32 | ImportMember | anthropic_test.py:29:16:29:37 | BinaryExpr | This prompt construction depends on a $@. | anthropic_test.py:2:26:2:32 | ImportMember | user-provided value |
| anthropic_test.py:33:28:33:32 | query | anthropic_test.py:2:26:2:32 | ImportMember | anthropic_test.py:33:28:33:32 | query | This prompt construction depends on a $@. | anthropic_test.py:2:26:2:32 | ImportMember | user-provided value |
| anthropic_test.py:41:16:41:37 | BinaryExpr | anthropic_test.py:2:26:2:32 | ImportMember | anthropic_test.py:41:16:41:37 | BinaryExpr | This prompt construction depends on a $@. | anthropic_test.py:2:26:2:32 | ImportMember | user-provided value |
| anthropic_test.py:45:28:45:32 | query | anthropic_test.py:2:26:2:32 | ImportMember | anthropic_test.py:45:28:45:32 | query | This prompt construction depends on a $@. | anthropic_test.py:2:26:2:32 | ImportMember | user-provided value |
| anthropic_test.py:53:16:53:37 | BinaryExpr | anthropic_test.py:2:26:2:32 | ImportMember | anthropic_test.py:53:16:53:37 | BinaryExpr | This prompt construction depends on a $@. | anthropic_test.py:2:26:2:32 | ImportMember | user-provided value |
| anthropic_test.py:57:28:57:32 | query | anthropic_test.py:2:26:2:32 | ImportMember | anthropic_test.py:57:28:57:32 | query | This prompt construction depends on a $@. | anthropic_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:17:22:17:46 | BinaryExpr | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:17:22:17:46 | BinaryExpr | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:18:15:18:19 | query | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:18:15:18:19 | query | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:22:22:22:46 | BinaryExpr | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:22:22:22:46 | BinaryExpr | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:23:15:37:9 | List | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:23:15:37:9 | List | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:26:28:26:51 | BinaryExpr | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:26:28:26:51 | BinaryExpr | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:33:33:33:37 | query | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:33:33:33:37 | query | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:41:22:41:46 | BinaryExpr | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:41:22:41:46 | BinaryExpr | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:42:15:42:19 | query | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:42:15:42:19 | query | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:53:33:53:37 | query | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:53:33:53:37 | query | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:63:28:63:51 | BinaryExpr | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:63:28:63:51 | BinaryExpr | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:67:28:67:32 | query | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:67:28:67:32 | query | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:71:28:71:32 | query | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:71:28:71:32 | query | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:80:28:80:51 | BinaryExpr | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:80:28:80:51 | BinaryExpr | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:84:28:84:32 | query | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:84:28:84:32 | query | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
| openai_test.py:92:22:92:46 | BinaryExpr | openai_test.py:2:26:2:32 | ImportMember | openai_test.py:92:22:92:46 | BinaryExpr | This prompt construction depends on a $@. | openai_test.py:2:26:2:32 | ImportMember | user-provided value |
edges
| agent_instructions.py:2:26:2:32 | ImportMember | agent_instructions.py:2:26:2:32 | request | provenance |  |
| agent_instructions.py:2:26:2:32 | request | agent_instructions.py:7:13:7:19 | request | provenance |  |
| agent_instructions.py:2:26:2:32 | request | agent_instructions.py:17:13:17:19 | request | provenance |  |
| agent_instructions.py:7:5:7:9 | input | agent_instructions.py:9:50:9:89 | BinaryExpr | provenance | Sink:MaD:11 |
| agent_instructions.py:7:13:7:19 | request | agent_instructions.py:7:13:7:24 | Attribute | provenance | AdditionalTaintStep |
| agent_instructions.py:7:13:7:24 | Attribute | agent_instructions.py:7:13:7:37 | Attribute() | provenance | dict.get |
| agent_instructions.py:7:13:7:24 | Attribute | agent_instructions.py:7:13:7:37 | Attribute() | provenance | dict.get(input) |
| agent_instructions.py:7:13:7:37 | Attribute() | agent_instructions.py:7:5:7:9 | input | provenance |  |
| agent_instructions.py:17:5:17:9 | input | agent_instructions.py:25:28:25:32 | input | provenance |  |
| agent_instructions.py:17:5:17:9 | input | agent_instructions.py:35:28:35:32 | input | provenance |  |
| agent_instructions.py:17:13:17:19 | request | agent_instructions.py:17:13:17:24 | Attribute | provenance | AdditionalTaintStep |
| agent_instructions.py:17:13:17:24 | Attribute | agent_instructions.py:17:13:17:37 | Attribute() | provenance | dict.get |
| agent_instructions.py:17:13:17:24 | Attribute | agent_instructions.py:17:13:17:37 | Attribute() | provenance | dict.get(input) |
| agent_instructions.py:17:13:17:37 | Attribute() | agent_instructions.py:17:5:17:9 | input | provenance |  |
| anthropic_test.py:2:26:2:32 | ImportMember | anthropic_test.py:2:26:2:32 | request | provenance |  |
| anthropic_test.py:2:26:2:32 | request | anthropic_test.py:11:15:11:21 | request | provenance |  |
| anthropic_test.py:2:26:2:32 | request | anthropic_test.py:12:13:12:19 | request | provenance |  |
| anthropic_test.py:11:5:11:11 | persona | anthropic_test.py:17:16:17:37 | BinaryExpr | provenance | Sink:MaD:4 |
| anthropic_test.py:11:5:11:11 | persona | anthropic_test.py:29:16:29:37 | BinaryExpr | provenance | Sink:MaD:6 |
| anthropic_test.py:11:5:11:11 | persona | anthropic_test.py:41:16:41:37 | BinaryExpr | provenance | Sink:MaD:4 |
| anthropic_test.py:11:5:11:11 | persona | anthropic_test.py:53:16:53:37 | BinaryExpr | provenance | Sink:MaD:2 |
| anthropic_test.py:11:15:11:21 | request | anthropic_test.py:11:15:11:26 | Attribute | provenance | AdditionalTaintStep |
| anthropic_test.py:11:15:11:21 | request | anthropic_test.py:12:13:12:24 | Attribute | provenance | AdditionalTaintStep |
| anthropic_test.py:11:15:11:26 | Attribute | anthropic_test.py:11:15:11:41 | Attribute() | provenance | dict.get |
| anthropic_test.py:11:15:11:41 | Attribute() | anthropic_test.py:11:5:11:11 | persona | provenance |  |
| anthropic_test.py:12:5:12:9 | query | anthropic_test.py:21:28:21:32 | query | provenance | Sink:MaD:3 |
| anthropic_test.py:12:5:12:9 | query | anthropic_test.py:33:28:33:32 | query | provenance | Sink:MaD:5 |
| anthropic_test.py:12:5:12:9 | query | anthropic_test.py:45:28:45:32 | query | provenance | Sink:MaD:3 |
| anthropic_test.py:12:5:12:9 | query | anthropic_test.py:57:28:57:32 | query | provenance | Sink:MaD:1 |
| anthropic_test.py:12:13:12:19 | request | anthropic_test.py:12:13:12:24 | Attribute | provenance | AdditionalTaintStep |
| anthropic_test.py:12:13:12:24 | Attribute | anthropic_test.py:12:13:12:37 | Attribute() | provenance | dict.get |
| anthropic_test.py:12:13:12:37 | Attribute() | anthropic_test.py:12:5:12:9 | query | provenance |  |
| openai_test.py:2:26:2:32 | ImportMember | openai_test.py:2:26:2:32 | request | provenance |  |
| openai_test.py:2:26:2:32 | request | openai_test.py:12:15:12:21 | request | provenance |  |
| openai_test.py:2:26:2:32 | request | openai_test.py:13:13:13:19 | request | provenance |  |
| openai_test.py:12:5:12:11 | persona | openai_test.py:17:22:17:46 | BinaryExpr | provenance | Sink:MaD:10 |
| openai_test.py:12:5:12:11 | persona | openai_test.py:22:22:22:46 | BinaryExpr | provenance | Sink:MaD:10 |
| openai_test.py:12:5:12:11 | persona | openai_test.py:26:28:26:51 | BinaryExpr | provenance |  |
| openai_test.py:12:5:12:11 | persona | openai_test.py:26:28:26:51 | BinaryExpr | provenance |  |
| openai_test.py:12:5:12:11 | persona | openai_test.py:41:22:41:46 | BinaryExpr | provenance | Sink:MaD:10 |
| openai_test.py:12:5:12:11 | persona | openai_test.py:63:28:63:51 | BinaryExpr | provenance | Sink:MaD:8 |
| openai_test.py:12:5:12:11 | persona | openai_test.py:80:28:80:51 | BinaryExpr | provenance | Sink:MaD:8 |
| openai_test.py:12:5:12:11 | persona | openai_test.py:92:22:92:46 | BinaryExpr | provenance | Sink:MaD:7 |
| openai_test.py:12:15:12:21 | request | openai_test.py:12:15:12:26 | Attribute | provenance | AdditionalTaintStep |
| openai_test.py:12:15:12:21 | request | openai_test.py:13:13:13:24 | Attribute | provenance | AdditionalTaintStep |
| openai_test.py:12:15:12:26 | Attribute | openai_test.py:12:15:12:41 | Attribute() | provenance | dict.get |
| openai_test.py:12:15:12:41 | Attribute() | openai_test.py:12:5:12:11 | persona | provenance |  |
| openai_test.py:13:5:13:9 | query | openai_test.py:18:15:18:19 | query | provenance | Sink:MaD:9 |
| openai_test.py:13:5:13:9 | query | openai_test.py:33:33:33:37 | query | provenance |  |
| openai_test.py:13:5:13:9 | query | openai_test.py:33:33:33:37 | query | provenance |  |
| openai_test.py:13:5:13:9 | query | openai_test.py:42:15:42:19 | query | provenance | Sink:MaD:9 |
| openai_test.py:13:5:13:9 | query | openai_test.py:53:33:53:37 | query | provenance |  |
| openai_test.py:13:5:13:9 | query | openai_test.py:67:28:67:32 | query | provenance | Sink:MaD:8 |
| openai_test.py:13:5:13:9 | query | openai_test.py:71:28:71:32 | query | provenance | Sink:MaD:8 |
| openai_test.py:13:5:13:9 | query | openai_test.py:84:28:84:32 | query | provenance | Sink:MaD:8 |
| openai_test.py:13:13:13:19 | request | openai_test.py:13:13:13:24 | Attribute | provenance | AdditionalTaintStep |
| openai_test.py:13:13:13:24 | Attribute | openai_test.py:13:13:13:37 | Attribute() | provenance | dict.get |
| openai_test.py:13:13:13:37 | Attribute() | openai_test.py:13:5:13:9 | query | provenance |  |
| openai_test.py:24:13:27:13 | Dict [Dictionary element at key content] | openai_test.py:23:15:37:9 | List | provenance | Sink:MaD:9 Sink:MaD:9 |
| openai_test.py:26:28:26:51 | BinaryExpr | openai_test.py:24:13:27:13 | Dict [Dictionary element at key content] | provenance |  |
| openai_test.py:28:13:36:13 | Dict [Dictionary element at key content, List element, Dictionary element at key text] | openai_test.py:23:15:37:9 | List | provenance | Sink:MaD:9 Sink:MaD:9 |
| openai_test.py:28:13:36:13 | Dict [Dictionary element at key content, List element, Dictionary element at key text] | openai_test.py:23:15:37:9 | List | provenance | Sink:MaD:9 Sink:MaD:9 Sink:MaD:9 |
| openai_test.py:28:13:36:13 | Dict [Dictionary element at key content, List element, Dictionary element at key text] | openai_test.py:23:15:37:9 | List | provenance | Sink:MaD:9 Sink:MaD:9 Sink:MaD:9 Sink:MaD:9 |
| openai_test.py:30:28:35:17 | List [List element, Dictionary element at key text] | openai_test.py:28:13:36:13 | Dict [Dictionary element at key content, List element, Dictionary element at key text] | provenance |  |
| openai_test.py:31:21:34:21 | Dict [Dictionary element at key text] | openai_test.py:30:28:35:17 | List [List element, Dictionary element at key text] | provenance |  |
| openai_test.py:33:33:33:37 | query | openai_test.py:31:21:34:21 | Dict [Dictionary element at key text] | provenance |  |
models
| 1 | Sink: Anthropic; Member[beta].Member[messages].Member[create].Argument[messages:].ListElement.DictionaryElement[content]; prompt-injection |
| 2 | Sink: Anthropic; Member[beta].Member[messages].Member[create].Argument[system:]; prompt-injection |
| 3 | Sink: Anthropic; Member[messages].Member[create].Argument[messages:].ListElement.DictionaryElement[content]; prompt-injection |
| 4 | Sink: Anthropic; Member[messages].Member[create].Argument[system:]; prompt-injection |
| 5 | Sink: Anthropic; Member[messages].Member[stream].Argument[messages:].ListElement.DictionaryElement[content]; prompt-injection |
| 6 | Sink: Anthropic; Member[messages].Member[stream].Argument[system:]; prompt-injection |
| 7 | Sink: OpenAI; Member[beta].Member[assistants].Member[create].Argument[instructions:]; prompt-injection |
| 8 | Sink: OpenAI; Member[chat].Member[completions].Member[create].Argument[messages:].ListElement.DictionaryElement[content]; prompt-injection |
| 9 | Sink: OpenAI; Member[responses].Member[create].Argument[input:]; prompt-injection |
| 10 | Sink: OpenAI; Member[responses].Member[create].Argument[instructions:]; prompt-injection |
| 11 | Sink: agents; Member[Agent].Argument[instructions:]; prompt-injection |
nodes
| agent_instructions.py:2:26:2:32 | ImportMember | semmle.label | ImportMember |
| agent_instructions.py:2:26:2:32 | request | semmle.label | request |
| agent_instructions.py:7:5:7:9 | input | semmle.label | input |
| agent_instructions.py:7:13:7:19 | request | semmle.label | request |
| agent_instructions.py:7:13:7:24 | Attribute | semmle.label | Attribute |
| agent_instructions.py:7:13:7:37 | Attribute() | semmle.label | Attribute() |
| agent_instructions.py:9:50:9:89 | BinaryExpr | semmle.label | BinaryExpr |
| agent_instructions.py:17:5:17:9 | input | semmle.label | input |
| agent_instructions.py:17:13:17:19 | request | semmle.label | request |
| agent_instructions.py:17:13:17:24 | Attribute | semmle.label | Attribute |
| agent_instructions.py:17:13:17:37 | Attribute() | semmle.label | Attribute() |
| agent_instructions.py:25:28:25:32 | input | semmle.label | input |
| agent_instructions.py:35:28:35:32 | input | semmle.label | input |
| anthropic_test.py:2:26:2:32 | ImportMember | semmle.label | ImportMember |
| anthropic_test.py:2:26:2:32 | request | semmle.label | request |
| anthropic_test.py:11:5:11:11 | persona | semmle.label | persona |
| anthropic_test.py:11:15:11:21 | request | semmle.label | request |
| anthropic_test.py:11:15:11:26 | Attribute | semmle.label | Attribute |
| anthropic_test.py:11:15:11:41 | Attribute() | semmle.label | Attribute() |
| anthropic_test.py:12:5:12:9 | query | semmle.label | query |
| anthropic_test.py:12:13:12:19 | request | semmle.label | request |
| anthropic_test.py:12:13:12:24 | Attribute | semmle.label | Attribute |
| anthropic_test.py:12:13:12:37 | Attribute() | semmle.label | Attribute() |
| anthropic_test.py:17:16:17:37 | BinaryExpr | semmle.label | BinaryExpr |
| anthropic_test.py:21:28:21:32 | query | semmle.label | query |
| anthropic_test.py:29:16:29:37 | BinaryExpr | semmle.label | BinaryExpr |
| anthropic_test.py:33:28:33:32 | query | semmle.label | query |
| anthropic_test.py:41:16:41:37 | BinaryExpr | semmle.label | BinaryExpr |
| anthropic_test.py:45:28:45:32 | query | semmle.label | query |
| anthropic_test.py:53:16:53:37 | BinaryExpr | semmle.label | BinaryExpr |
| anthropic_test.py:57:28:57:32 | query | semmle.label | query |
| openai_test.py:2:26:2:32 | ImportMember | semmle.label | ImportMember |
| openai_test.py:2:26:2:32 | request | semmle.label | request |
| openai_test.py:12:5:12:11 | persona | semmle.label | persona |
| openai_test.py:12:15:12:21 | request | semmle.label | request |
| openai_test.py:12:15:12:26 | Attribute | semmle.label | Attribute |
| openai_test.py:12:15:12:41 | Attribute() | semmle.label | Attribute() |
| openai_test.py:13:5:13:9 | query | semmle.label | query |
| openai_test.py:13:13:13:19 | request | semmle.label | request |
| openai_test.py:13:13:13:24 | Attribute | semmle.label | Attribute |
| openai_test.py:13:13:13:37 | Attribute() | semmle.label | Attribute() |
| openai_test.py:17:22:17:46 | BinaryExpr | semmle.label | BinaryExpr |
| openai_test.py:18:15:18:19 | query | semmle.label | query |
| openai_test.py:22:22:22:46 | BinaryExpr | semmle.label | BinaryExpr |
| openai_test.py:23:15:37:9 | List | semmle.label | List |
| openai_test.py:24:13:27:13 | Dict [Dictionary element at key content] | semmle.label | Dict [Dictionary element at key content] |
| openai_test.py:26:28:26:51 | BinaryExpr | semmle.label | BinaryExpr |
| openai_test.py:26:28:26:51 | BinaryExpr | semmle.label | BinaryExpr |
| openai_test.py:28:13:36:13 | Dict [Dictionary element at key content, List element, Dictionary element at key text] | semmle.label | Dict [Dictionary element at key content, List element, Dictionary element at key text] |
| openai_test.py:30:28:35:17 | List [List element, Dictionary element at key text] | semmle.label | List [List element, Dictionary element at key text] |
| openai_test.py:31:21:34:21 | Dict [Dictionary element at key text] | semmle.label | Dict [Dictionary element at key text] |
| openai_test.py:33:33:33:37 | query | semmle.label | query |
| openai_test.py:33:33:33:37 | query | semmle.label | query |
| openai_test.py:41:22:41:46 | BinaryExpr | semmle.label | BinaryExpr |
| openai_test.py:42:15:42:19 | query | semmle.label | query |
| openai_test.py:53:33:53:37 | query | semmle.label | query |
| openai_test.py:63:28:63:51 | BinaryExpr | semmle.label | BinaryExpr |
| openai_test.py:67:28:67:32 | query | semmle.label | query |
| openai_test.py:71:28:71:32 | query | semmle.label | query |
| openai_test.py:80:28:80:51 | BinaryExpr | semmle.label | BinaryExpr |
| openai_test.py:84:28:84:32 | query | semmle.label | query |
| openai_test.py:92:22:92:46 | BinaryExpr | semmle.label | BinaryExpr |
subpaths