Analysis · curated 21 Jul 2026
Prompt injection is an egress problem
First reported vaibot.io
Coverage timeline
Single-source analysis — first reported, latest, and curated coincide.
Why it matters
Framing prompt-injection defense around egress action-gating rather than input scanning gives defenders a bounded, enforceable control surface for agentic and MCP-based systems.
A VAIBot blog post reframes prompt injection as an egress problem, arguing that input-side detection of injected instructions is unwinnable and that defenders should instead gate the actions an agent can take (commands, network calls, tool invocations) with allow/approve/deny policies and tamper-evident receipts. The post promotes VAIBot's 'guard' npm package and MCP server as the enforcement point for this approach.