Viewing profile — Miyamura80

A prompt injection attack via GitHub issues that is close to invisible, even to experienced engineers, and visible to LLMs. Clawdbot is full of security holes and we're having fun.…

Good point around the markdown image as an untrusted vector. Lethal trifecta is determnistically preventable, it really should be addressed wider in the indutry

Totally agree, unfettered access to databases are dangerous There are ways to reduce injection risk since LLMs are stateless and thus you can monitor the origination and the trustw…

In case there is an interest for solution to this, check out open.edison.watch and the accompanying blog posts on the README there.

Sorry not familiar with this. Can you please link me?

You actually can protect against it, by tracking context entering/leaving the LLM, as long as its wrapped in a MCP gateway with trifecta blocker. We've implemented this in open.edi…

Very cool, what is the tok/s on this?