Word
Prompt injection
Prompt injection is text written into a message or document to give orders to whatever AI reads it, rather than to be read by a person.
Also called: injection, instructions hidden in a message
Anything an AI reads can try to tell it what to do. A customer message saying to ignore your instructions and refund everything is aimed at the software, not at you.
You're safe from it while nothing in your app reads a message, which is how the kit arrives. The day you add drafting, you're not, so make it one of the first things you test.
The defense isn't clever wording. It's that drafting has no power to act: it writes into a box, a person reads it, a person sends it. An instruction hidden in a message can only reach as far as the software was already allowed to go.