Paste your agent's system prompt, list its tools, and say where outside text gets in (user messages, web pages, uploaded files, tool results). You get back a list of attacks that would work against it, ranked by severity, each with the exact text an attacker would send, the reason it works, and the line to change. Then a patch block to add to your prompt and six test inputs to rerun after the fix. For auditing agents you own.