Prompt Injection

Prompt injection is an attack in which malicious text in user input or retrieved content attempts to override the model's original instructions and redirect its behavior. Direct injection embeds commands in the user's message; indirect injection hides instructions in documents or web pages the agent retrieves. Defenses include strict delimiters, sandboxed retrieval, instruction hierarchy enforcement, and output validation — though no defense is yet fully robust against all injection variants.