Loading Open Internet
    Mitigating Prompt Injection in LLM Agents