 How to Prevent Prompt injection vulnerabilities are possible due to the nature of LLMs, which do not segregate instructions and external data from each other.  Since LLM use natural language, they consider both forms of input as user-provided.  Consequently, there is no fool-proof prevention within the LLM, but the following measures can mitigate the impact of prompt injections Enforce privilage control on LLM access to backend systems.  Provide the LLM with its own API tokens for extensible functionality, such as plugins, data access, and function- level permissions.  Follow the principle of least privilege by restricting the LLM to only the minimum level of access necessary for its intended operations Implement human in the loop for extensible functionality