Before You Expose That Agent, Let a Free Model Attack It

Before you expose a tool-using language model to customers, contractors, or any input you do not...