Prompt Injection Hardening Review Prompt

System prompt and where untrusted content enters it:
{{prompt_and_data_flow}}

Identify every point where user-supplied or retrieved text could contain instructions the model might follow.
For each: the concrete injected string that would test it, and the mitigation (delimiting, instruction hierarchy, output validation, or tool permission scoping).
Rank the findings by what an attacker could actually achieve, not by how clever the injection looks.

Replace the {{fields}} with your own context and tighten the rules to match your domain.