From the source
Vercel published a guide on building secure AI agents, focusing on prompt injection risks.
It recommends assuming total compromise of the prompt, scoping tools to the caller's authority, and treating model output as untrusted.
The post also introduces two open-source packages: harden-react-markdown and markdown-to-markdown-sanitizer.
