Comment by kennywinker

I don’t think it counts as social engineering if it’s exploiting an llm, we might need a new word. Prompt injection doesn’t cover it, because it’s not about a malicious prompt.

I’m thinking some play on highjacking. AIjacking? Agent-jacking? Claudejacking?