PRSA: Prompt Stealing Attacks Against Real-World Prompt Services
Date: 2024-02
Affected: PromptBase, FlowGPT, commercial prompt marketplaces
Attack vector: prompt-injection
Category: research
Severity: Medium

Yang et al. construct PRSA, an end-to-end attack that steals commercial prompt-service templates (e.g., PromptBase, FlowGPT) from input-output behavior alone.


Mitigations:

Architectural layers (MAESTRO):