A malicious document exploits the gap between retrieval and tool use. How would you close it?

Instruction: Explain how you would defend a workflow where retrieved content can influence tools indirectly.

Context: Tests how the candidate diagnoses the problem, chooses the safest next step, and reasons through recovery. Explain how you would defend a workflow where retrieved content can influence tools indirectly.