A research bot that can browse issuer IR sites faces prompt injecti…

Question

A research bot that can browse issuer IR sites faces prompt injection risk. Best mitigation set?

Accepted Answer

Treat web content as untrusted, constrain tools, require allowlisted domains, and block privileged actions from page instructions. — IR page text isn’t root access — untrusted content, allowlists, no privileged actions from HTML.

Answer

Trust all web text as system policy.

Answer

Grant the bot wire-transfer tools by default.

Answer

Disable all logging of tool calls.

A research bot that can browse issuer IR sites faces prompt injection risk. Best mitigation set?

Short Explanation and Infographic

Full Explanation