mlsanityData to 14 Oct 2026

Prompt Injection in Automated R'esum'e Screening with Large Language Models: Single and Multi-Injection Settings

arXiv 2606.27287 ↗First posted 25 Jun 2026cs.AIcited by 1

On the map: LLM safety and security → Prompt injection and agent security

Abstract (arXiv)

Large language models (LLMs) are increasingly used to screen and rank job applicants, creating incentives for candidates to strategically manipulate algorithmic hiring systems. We study prompt injection in automated r'esum'e screening, defined as subtle self-promotional text that introduces no new qualifications but is designed to influence LLM evaluations. Using controlled experiments, we show that prompt injection reliably improves applicant rankings when r'esum'e quality is homogeneous and few candidates inject. However, its effectiveness rapidly diminishes as more candidates inject, collapsing when manipulation becomes widespread. When candidate quality is heterogeneous, prompt injection is less effective on average, but can occasionally allow lower-quality candidates to outrank higher-quality ones, raising fairness concerns. Overall, LLM-based screening is most vulnerable when manipulation is rare and candidate quality differences are small. Code and resources are publicly available at: https://github.com/preetb1199/PromptInjectionACL26

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 4 of its 18 references that are in the map. First posted on arXiv 25 Jun 2026.

Builds on

4 of 18 references.

Closest ancestors · 3

Same direction, newest first

  1. 2025Prompt Injection Vulnerability of Consensus Generating Applications in Digital Democracy6 Aug
  2. 2025PromptArmor: Simple yet Effective Prompt Injection Defenses21 Jul
  3. 2024Optimization-based Prompt Injection Attack to LLM-as-a-Judge26 Mar

Other references · 1

  1. 2025Two Tickets are Better than One: Fair and Accurate Hiring Under Strategic LLM Manipulationscited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2025Foundation Models at Work: Fine-Tuning for Fairness in Algorithmic Hiring
  2. 2025"You Are Rejected!": An Empirical Study of Large Language Models Taking Hiring Evaluations
  3. 2025When Your Reviewer is an LLM: Biases, Divergence, and Prompt Injection Risks in Peer Review
  4. 2025Multilingual Hidden Prompt Injection Attacks on LLM-Based Academic Reviewing
  5. 2025Robustly Improving LLM Fairness in Realistic Settings via Interpretability
  6. 2026LLM-as-a-Reviewer: Benchmarking Their Ability, Divergence, and Prompt Injection Resistance as Paper Reviewers
  7. 2024Automatic and Universal Prompt Injection Attacks against Large Language Models
  8. 2024The Promise and Challenges of Using LLMs to Accelerate the Screening Process of Systematic Reviews