Every security story.

Prompt injection through tool outputs

When an agent pulls in a web page, an email or a tool result, any text inside it lands in the same context window as your instructions. An attacker who controls that content can try to steer the agent. The defences are architectural: least privilege, separating data from instructions, and human confirmation for risky actions.

Why you ·Every tool you add to the HivePro agent platform or Susanoo is a new input channel an attacker might control. JanusGuard also needs this threat model if it ever reads attacker-supplied logs or payloads.