Preventing prompt injection attacks on AI agents