What is prompt injection and how do you mitigate it in LLM applications?

Prompt injection is when untrusted input manipulates the model to ignore instructions or reveal secrets. Mitigations: - Treat all external text as untrusted - Separate system instructions from user content - Use allowlisted tools/actions - Output filtering + policy checks - Least-privilege tool permissions Test with red-team prompts and monitor for policy violations.