Designing AI agents to resist prompt injection What social engineering teaches us about securing AI agents. AI agents are increasingly able to browse the web, retrieve information, and take actions on a user’s behalf. Those capabilities are useful, but they also create new ways for attackers to try to manipulate the system. These attacks are often described as prompt injection: instructions placed...