I find it funny and concerning that you must prompt the model to do an SQL insert 'safely' to avoid injection vulnerabilities. I'm sure someone in the near futu

I find it funny and concerning that you must prompt the model to do an SQL insert 'safely' to avoid injection vulnerabilities. I'm sure someone in the near future will find a way to train models to avoid well known hazards such as the OWASP Top 10 [1]. The field of program synthesis based on NLP models is really starting to heat up - we have OpenAI Codex, GitHub Copilot, and a recent paper [2] from Google Research demonstrating that these same techniques can generate programs which solve mathematical word problems. Here is an example of the latter: > Prompt: Please, solve the mathematical problem: a and b start walking towards each other at 4pm at a speed of 2 kmph and 3 kmph. They were initially 15 km apart. At what time do they meet? n0 = 4.0, n1 = 2.0, n3 = 15.0. > Model output (python program): n0 = 4.0 n1 = 2.0 n2 = 3.0 n3 = 15.0 t0 = n1 + n2 t1 = n3 / t0 answer = n0 + t1 [1] https://owasp.org/www-project-top-ten/ https://owasp.org/www-project-top-ten/ [2] https://news.ycombinator.com/item?id=28217026 https://news.ycombinator.com/item?id=28217026