Obeying instructions hidden in text it should only read
Content an agent reads, such as a web page, a file or a tool result, carries instructions, and the agent follows them as if the person had given them. The guards package is only a tripwire for it: it flags a fixed list of English phrasings, and a paraphrase, another language or an encoding passes.
Can be caused by
Using these components can cause this failure, so a run that uses them needs one of the guards above.
adapt_rqagent_autogenagent_claudeagent_codexagent_langgraphagent_nanoclawagent_smolagentsalign_prompt_libraryaustralian_legal_corpusctx_contexthubctx_elasticctx_geoctx_gitctx_langextractctx_library_mapperctx_searchctx_visiondatabasehat_orchestratorknowledge_converterknowledge_fetchershared_workspaceswe_diagnosticsworkspace_manager