Explanation

Prompt injection exploits the model instruction channel by inserting adversarial content that competes with or overrides trusted directives. Attackers embed malicious instructions in user prompts, retrieved documents, tool outputs, or web content to force unsafe responses and actions. The risk grows in agent systems where model output can trigger tools and external side effects.