Tagged “prompt injection”
- A tool result is untrusted input, and no filter will make it safe
Prompt injection reaches agents through ordinary API responses: an issue body, a support ticket, a product review. You can't sanitise English, so the defence has to limit what a session can do after it reads untrusted text, not what the text says.