Prompt Injection Defense

Protect your agent from acting on malicious instructions embedded in external content.

Defense Layers

Layer 1: Content Tagging

Wrap all untrusted content in markers before the agent processes it:

bash scripts/tag-untrusted.sh web_search curl -s https://example.com/api

Sources: web_search, gmail, calendar, file_download, pdf, rss, api_response.

Layer 2: Content Scanning

Scan text for injection patterns, scoring severity (none/low/medium/high):