The dangerous text is the text your own code fetched
Injection through a chat box is the easy case, because you know that text is untrusted. The hard case arrives inside a tool result your own code requested, wearing your system's clothes. This lesson maps where untrusted text actually enters an agent and what to do at each door.
a free account unlocks the core curriculum tier · no card
