Before You Expose That Agent, Let a Free Model Attack It

Before you expose a tool-using language model to customers, contractors, or any input you do not fully control, make another model attack it first. This short red-team loop costs little when you use a...