Glossary › Prompt Injection
Prompt Injection
Content the model reads (a web page, an email, a document, a tool result) that contains instructions the model then follows. Structurally unsolved because the model sees instructions and content as one sequence. Contained, not prevented, by limiting what the agent can do.
Where Prompt Injection shows up
All matching postsAI Security for Agents: Prompt Injection, Excessive Agency, and Sandboxing
Prompt injection is structurally unsolved, and agents turned it from an embarrassment into a breach. Learn the OWASP agentic risk categories, why detection fails, and the containment architecture that works: least-privilege tools, approval gates, sandboxes, provenance, and a red-team practice you run against your own harness.
Agent Evals and AI Security
How do you know an agent works, and how do you keep it from being turned against you? Trajectory grading, task suites built from failures, validated judges, CI regression gates, and the containment architecture for prompt injection: least privilege, approval gates, sandboxes, and a red-team practice you run yourself.
Prompt Injection: Why It's Unsolved and How to Contain It
Prompt injection is content the model reads that redirects what it does, and no filter catches it reliably. Here is the mechanism, a taxonomy of attacks with real-shaped examples, why detection fails, and the containment architecture that makes a successful injection boring instead of a breach.