Skills
Pre-Planned Execution Pattern: Agent Commits to Fixed Action Sequence Before Processing Any Untrusted Data, Making Injections Non-Executable
One of six injection-resistant design patterns from Aktagon: the agent produces a complete execution plan (ordered list of tool calls and parameters) before ingesting any external data source. Tool outputs, web pages, and documents are fetched but cannot alter the predetermined sequence. The plan itself becomes immutable after generation, so even fully injected responses from external tools have no pathway to modify agent behavior. Most effective for workflows with predictable structure.
↳ Follow the thread