---
title: Prompt Injection
seo_title: Prompt Injection — video
description: How an instruction hidden in a document can enter an AI system and which controls separate reading from action.
keywords: prompt injection, LLM security, indirect prompt injection, RAG security, AI agent security, dual LLM pattern
date: '2026-05-26T00:00:00+00:00'
robots: index,follow,max-snippet:-1,max-image-preview:large,max-video-preview:-1
hide:
- toc
- navigation
video_watch_page: true
---


<div class="s5-video-watch" data-s5-video-watch data-video-id="videos-series-seguridad-ia-01-prompt-injection-md">
  <header class="s5-video-watch__header">
    <div class="s5-video-watch__crumbs"><a href="https://5sigmas.com/en/videos/">All videos</a><span>AI security</span><span>0:48</span></div>
    <h1>Prompt Injection</h1><p>How an instruction hidden in a document can enter an AI system and which controls separate reading from action.</p>
  </header>
  <div class="s5-video-watch__player">
    <video controls crossorigin="anonymous" preload="metadata" poster="/en/series/seguridad-ia/01-prompt-injection.jpg" playsinline data-s5-watch-player><source src="/en/series/seguridad-ia/01-prompt-injection.mp4" type="video/mp4">Your browser does not support the video element.</video>
    <p>Links containing <code>?t=</code> open the video at a specific second.</p>
  </div>
  <section class="s5-video-watch__summary" aria-labelledby="video-summary-title">
    <div class="s5-video-watch__section-head"><span class="s5-eyebrow">Video summary</span><h2 id="video-summary-title">The ideas to retain</h2></div>
    <div class="s5-video-watch__snippet-grid"><article><span>01</span><h2>1. The problem starts when a document reaches the model</h2><p>The most common mistake is to treat prompt injection as an exotic version of “write a better system prompt.” That confuses the symptom with the cause.</p></article>
<article><span>02</span><h2>2. The instruction can appear in a document search</h2><p>In a simple chat, the attacker still speaks directly to the model. That is already a problem, but the risk remains relatively contained: the malicious input and the effect stay within the…</p></article>
<article><span>03</span><h2>3. Filtering words does not separate data from instructions</h2><p>When prompt injection appears, the natural reaction is to add filters: lists of forbidden words, detectors for dangerous instructions, query rewriting, perplexity filters, masking, an…</p></article></div>
  </section>
  
  
  <aside class="s5-video-watch__source"><div><span class="s5-eyebrow">Context and evidence</span><h2>Continue with the full article</h2><p>The chapter develops the mechanism, primary sources, limitations and connections to the rest of the series.</p></div><a class="s5-video-watch__source-link" href="https://5sigmas.com/en/series/seguridad-ia/01-prompt-injection/">Read the article →</a></aside>
  <section class="s5-video-watch__related" aria-labelledby="related-videos-title"><div class="s5-video-watch__section-head"><span class="s5-eyebrow">Next step</span><h2 id="related-videos-title">Related videos</h2></div><div class="s5-video-watch__related-grid"><article><a href="https://5sigmas.com/en/videos/series/seguridad-ia/05-controles-produccion/"><img src="https://5sigmas.com/en/series/seguridad-ia/05-controles-produccion.jpg" alt="" loading="lazy" width="1280" height="720"><span>AI security · 0:48</span><strong>Production Controls</strong></a></article>
<article><a href="https://5sigmas.com/en/videos/series/seguridad-ia/04-red-teaming/"><img src="https://5sigmas.com/en/series/seguridad-ia/04-red-teaming.jpg" alt="" loading="lazy" width="1280" height="720"><span>AI security · 0:48</span><strong>Red Teaming</strong></a></article>
<article><a href="https://5sigmas.com/en/videos/series/seguridad-ia/03-envenenamiento/"><img src="https://5sigmas.com/en/series/seguridad-ia/03-envenenamiento.jpg" alt="" loading="lazy" width="1280" height="720"><span>AI security · 0:48</span><strong>Poisoning</strong></a></article></div></section>
</div>