Indirect Prompt Injection: How to Protect Your AI Agent with Spotlighting and Prompt Shields