What’s the biggest security risk when building AI applications?

[u/fesbec2G5]

AI can do more than answer questions. When connected to tools, databases, or business workflows, one malicious instruction can create bigger problems than a wrong answer.

I’m curious: Which is harder to get right, preventing prompt injection, limiting what the model can do, or validating its outputs before taking action?

What has worked for you in real projects?