Comment by ireadmevs

I would even go one step further: why would an AI tasked with summarizing external comments require any tool access, especially being able to reach into non public data?

The solution to prompt injection is not more AI on top of it, it starts with data access controls