I tested my agent sandbox next to a prompt-injection guardrail and found a way around its approvals

· Dev.to