Baseline · Prompt injection & input
F-01 Untrusted content separated from instructions
highmanual review
Why it matters
External content is tagged as data, not on par with user instructions.
How to test
Use injection payloads to see if external content is treated as instructions.
How to fix
Tag untrusted sources; separate instructions from data.