Secure RAG Agent
ADVANCEDPLATFORM VERIFIEDBuild an agent that answers from controlled knowledge, cites evidence, and resists malicious instructions embedded in retrieved data.
The Operational Challenge
Attackers embed malicious instructions into public articles and internal wikis (indirect prompt injection) instructing corporate agents to leak API keys or wipe tables.
Your agent will be executed against 35 automated test cases. It will be queried on corporate financial statements, challenged to provide exact quote citations, and subjected to direct and indirect prompt injection attacks designed to leak internal configurations or bypass restrictions.
Technical Objective
Engineer dual-layer boundary defense: separate system instructions from untrusted retrieved text, sanitize tool inputs, and detect prompt injection payloads like PI-017.