Prompt injection ranks first, incidents say twelfth

Prompt injection remains the OWASP community’s #1 LLM risk, but an exploratory analysis of 6,639 labeled incidents ranked it #12 in the public incident record. The analysis published on arXiv reports weak agreement between expert and incident rankings (Cohen’s κ≈0.20) and explicitly says it is not the official OWASP release; the final OWASP entry still treats prompt injection as a core deployment risk. Teams should test both attack frequency and blast radius, extending the archive’s case for hard-deny controls in Claude Code.