CodeSentinel: A Three-Layer Defense Against Indirect Prompt Injection in Code Contexts

Code large language models increasingly retrieve external code context from repositories, documentation, issue threads, and coding-agent environments, creating an indirect prompt-injection surface where attackers hide instructions in comments, strings, identifiers, or decoy code. We propose CodeSent...