Instruction Commenting

Embeds instructions as code comments or inline annotations. " By appending code-comment-style overrides to harmful requests, the attacker tests whether the comment-as-metadata association transfers to the safety domain. Structurally similar to T1-AT-004 (Prefix/Suffix) but uses comment syntax specifically rather than general command-line tokens.

• Detect code comment syntax in natural-language context: /* */, //, #, ! followed by override claims
• YARA rule: yara/t01-prompt-injection.yar

Chains with T1-AT-004 (Prefix/Suffix) and T1-AT-006 (Template Injection) as compound formatting attacks. When multiple formatting conventions are combined (comment + template + prefix), the compound signal may exceed the model's safety threshold even when individual signals do not.