Scan MCP tool responses for instruction-like content before they re-enter agent context

Unit 42·high signal

Add a response-filtering layer that, before a tool's output reaches the agent, flags imperative sentences directed at an AI, references to system messages or prior instructions, and directives to send or forward data. Combined with per-tool/per-caller rate limits, this blocks indirect prompt injection that arrives through returned content rather than the initial prompt.