Prompt Injection Testing: Validate how agents resist injection, data leakage, and unauthorized calls

Test whether untrusted documents, web pages, and tool outputs can override instructions, leak data, or trigger privileged actions.