Your question is Secure Enterprise Agent Tool Use. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
You are building an enterprise agent that can read internal documents, answer employee questions, and take limited actions through tools such as calendar access, ticket creation, and data lookup. The main concern is that untrusted inputs, including user messages and retrieved content, may try to override instructions or trigger unsafe actions.
How do you mitigate security risks such as prompt injection and unauthorized tool execution in an enterprise agentic application?