scenario · 9 MIN
What it reads can steer it
Understand that an agent reading untrusted content can be redirected, and limit what that can do.
HOOK
Your agent reads strangers’ emails. What can it do after it has read one?
Checking your account…
SOURCES
- LLM01:2025 Prompt Injection — OWASP Gen AI Security Project
- LLM06:2025 Excessive Agency — OWASP Gen AI Security Project