Prompt injection
AI in the stackHostile instructions hidden in content a model reads.
A web page, email or uploaded file containing text aimed at the model rather than the reader. There is no reliable filter, because instructions and data arrive through the same channel. Limit what the agent can do instead.
See also Agent, Blast radius, Tool use