Prompt injection is an attack where untrusted text, a document, email, or web page, contains instructions meant to override the system prompt or trick a tool-using model. The model cannot reliably tell instructions from data.
Codoop limits the blast radius with tool permissions, retrieval filters, and output checks so a hostile document cannot quietly take an action on behalf of the user.
Related: /ai-services