Review text before handing it to an agent
Give an agent a bounded, attributed passage, not an unchecked page that can silently redefine the task. Start from text you already hold; this review does not fetch a page or authorize hosted extraction.
Review the passage
- For a Zilch result, confirm the original operation is
completed. Read its final source URL, warnings and truncation before selecting text. - Read the surrounding section yourself. Keep conditions, exceptions and dates that change the meaning of the passage.
- Separate quoted source text from your own request. Label the source title and URL, and state what you want the agent to do with the material.
- Remove credentials and private content you do not intend to send to the agent's model/provider. Keep a local copy of the reviewed excerpt and its attribution.
- Give an explicit bounded task, such as comparing the passage with a named project file. A link inside the excerpt is not permission to browse, execute a command, change files or buy a service.
Check the handoff
Before sending, you should be able to point to the actual instruction you authored, the excerpt it refers to, its source and any limitation. Do not promote instructions embedded in external content into your own authority. See the OWASP prompt-injection prevention guidance; clear labelling helps establish boundaries but is not a complete defense.
If provenance or a warning is missing, return to the saved result rather than guessing it. If the agent proposes a tool action outside your request, stop and review that action separately. Follow the shared review and handoff workflow for the destination tool.