Test your prompt for injection

My prompt processes content I don't control: <paste the prompt and
describe where the untrusted content comes from>

Act as an attacker. Write ten inputs designed to make this:
- Ignore its instructions and follow new ones.
- Reveal the system prompt.
- Produce output in a different format that breaks my parsing.
- Call a tool it shouldn't, or with arguments it shouldn't.

Then, for each that would work: how do I structure the prompt so
untrusted content is clearly data rather than instructions?

And tell me which risks can't be fixed by prompting alone and need a
limit on what the system can actually do.