Module 16 · Chapter 10: Prompt-injection defence
Injection that arrives through data
In short
Agents read a lot of text written by others, and that text can carry orders. The biggest danger arises when one agent holds private data, untrusted text and a way out at once; remove one of them.
After this lesson you can
- Recognise indirect injection paths through files, pages and tool results
- Judge the danger of combining private data, untrusted text and a way out
Sign in to read this lesson
The title and summary are open to everyone. The full lesson is for signed-in learners.