I’m considering using Claude to summarize material gathered from shared folders, where some documents come from outside our team. A concern is that a document could contain instructions aimed at the model, even though we only want Claude to treat it as source material.

How are people testing whether Claude keeps those two things separate when the document says something that conflicts with the task instructions? I’m especially curious about practical ways to check prompt injection in documents before relying on summaries in a real workflow.