Learn why LLM agents need guarded tool access to prevent prompt injection attacks. Compare Firecracker, gVisor, and Nix sandboxing methods for securing external actions.