Prompt injection sits at the top of the OWASP LLM Top 10 for a reason. Here is how direct and indirect attacks work, what they do to agentic apps, and the defenses we actually rely on.