Prompt Injection

Prompt injection can come directly from a user or indirectly from documents, webpages, emails, or other content that an AI system reads. Defenses include strict tool permissions, input separation, allowlists, validation, limited context exposure, human approval, and treating model output as untrusted rather than authoritative.