Prompt_Injection_Defense / Indirect_Injection_Via_Tool_Chain · size 20 · threshold 4 · max attempts 3