CCDV-F: Claude Certified Developer — Foundations

Validating and sanitizing external input, and treating embedded instructions as data rather than commands, helps reduce prompt-injection risk while allowing legitimate external content to be processed. These measures should be combined with other safeguards, since they do not guarantee that an injection will fail. (platform.claude.com)