"Indirect prompt injection is an attack in which instructions reach an AI agent inside content it reads for someone else: a ...