very cool break down! it looks like it is very hard to defend against those. I am building a customer facing agent and I am looking for lean ways to defend against these attacks
what do you recommedn?
what do you recommedn?
Most promising approach right now is this one: https://simonwillison.net/2025/Apr/11/camel/
This paper is useful too: https://simonwillison.net/2025/Jun/13/prompt-injection-desig...