{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/design-patterns-securing-agents-prompt-injection-2025/",
 "asOf": "2026-09-26",
 "id": "design-patterns-securing-agents-prompt-injection-2025",
 "date": "2025-06-10",
 "datePrecision": "day",
 "title": "Researchers from labs and industry publish design patterns for provably injection-resistant agents",
 "lane": "defense",
 "kind": "framework",
 "summary": "Authors from Invariant Labs, IBM, ETH Zurich, Swisscom, Google, Microsoft and others propose six design patterns that limit what injected text can do, such as action-selector, plan-then-execute, dual LLM, LLM map-reduce, code-then-execute and context minimization. They discuss utility and security trade-offs and illustrate the patterns with ten application case studies.",
 "whyItMatters": "It gives builders architecture-level mitigations that do not depend on the model detecting injections.",
 "actors": [
  "invariant-labs",
  "ibm",
  "eth-zurich",
  "google",
  "microsoft",
  "swisscom"
 ],
 "topics": [
  "prompt-injection",
  "tool-and-mcp-security"
 ],
 "atlas": [
  "untrusted-content",
  "tools",
  "model"
 ],
 "artifacts": [],
 "sources": [
  {
   "url": "https://arxiv.org/abs/2506.08837",
   "publisher": "arXiv",
   "title": "Design Patterns for Securing LLM Agents against Prompt Injections",
   "date": "2025-06-10",
   "type": "primary",
   "accessed": "2026-09-25"
  },
  {
   "url": "https://arxiv.org/html/2506.08837",
   "publisher": "arXiv",
   "title": "Design Patterns for Securing LLM Agents against Prompt Injections (HTML)",
   "date": "2025-06-10",
   "type": "primary",
   "accessed": "2026-09-25"
  }
 ],
 "keyFacts": [
  {
   "fact": "Six patterns defined; ten case studies including an SQL agent, email and calendar assistant, and software engineering agent.",
   "locator": "Section 3.1; Section 4"
  }
 ],
 "significance": 4,
 "fideQuestions": [],
 "methods": [
  "control-data-isolation"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}