Measures for defending against prompt injection include input filtering, output inspection, using independent security models as gatekeepers (such as Guardrails AI and NeMo Guardrails), and restricting agent tool invocation permissions.