What is prompt injection?

Prompt injection is an attack where user input contains instructions that trick the model into ignoring its system prompt, revealing sensitive information, or performing unintended actions. It works because LLMs do not natively distinguish between developer instructions and user content; everything is just tokens. Prompt injection is the OWASP number one risk for LLM applications.