Simply asking a large language model 'have you seen this user?' or comparing its recommendations after prompt poisoning can reveal whether a user's interactions are in the hidden prompt of an ICL-based recommender.
Title resolution pending
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.IR 1years
2025 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Membership Inference Attacks on In-Context Examples in LLM-based Recommender Systems
Simply asking a large language model 'have you seen this user?' or comparing its recommendations after prompt poisoning can reveal whether a user's interactions are in the hidden prompt of an ICL-based recommender.