Researchers built a document-review agent and tested prompt injection attacks by hiding malicious instructions in supplier proposals. They ran 80 experiments varying user wording, document content, and authorization levels, finding that phrasing like "review this document" triggered unauthorized tool calls in 10 of 10 runs, while task-scoped authorization checks effectively prevented the leak.