Prompt InjectionDirect and indirect injection, tool call hijacking, cross-context leakage, and defense strategies.