Prompt injection sits at the top of the OWASP Top 10 for LLM Applications 2025, listed as LLM01. For a chatbot, a successful injection usually means a bad or embarrassing reply. For an AI agent with tools, it can mean an action: a refund issued, a message sent, a record