Asked about Defending architecturally
How might data leak out of an agent even if it cannot send email?
An answer that works
Through any outbound request it can influence. A fetched URL containing the data in its path or query, or a rendered markdown image, both make a request without looking like sending anything. Allowlist domains and be careful about rendering model output as markup.
Reading an answer is not being able to give one. The section that teaches this is Defending architecturally, 3 hours of Prompt injection & guardrails.
Learn this properlyAlso asked about Prompt injection & guardrails