External Knowledge and Prompt Injection: How Not to Read Documents as Instructions
Treat web materials as analytical inputs, separate from task instructions and tool permissions. Competitor pages and uploads may contain text intended to change a model’s behavior. The richer the supporting evidence becomes, the more important the authority boundary around external text is.