How should people share agent-security tests without making it vendor spam?

I’m asking because this topic gets messy fast.

Prompt injection is more interesting once the model can use tools, but most posts end up as either scary headlines or someone sneaking in a product pitch.

What would be a useful format here?

My gut says small reproducible examples, clear limits, no “we solved it” claims, and enough detail that people can argue with the result.