Shellward: Protect AI Agents from Prompt Injection & Exfiltration