Prompt Injection Is the Input Bug of the Agent Era

SQL injection taught us not to trust raw user input. Agents force the next lesson: don’t trust text just because the model can read it.