What prompt injection is, direct vs indirect vs multimodal attack types, what can go wrong, and a scored 12-point enterprise defense checklist based on OWASP LLM01.