3 ms·

It should be noted that this tool uses a prompt [1] which does include the whole file, or in case of non textual content, the metadata of the image/video/audio

• greshake 4y ago
  Output from the language model is also being injected into a script that is then executed: https://github.com/jjuliano/aifiles/blob/ef529fd6281eaf8d373fc3c3704a9c61cc48384b/src/utils.ts#L626 https://github.com/jjuliano/aifiles/blob/ef529fd6281eaf8d373... He argued below that he is not vulnerable to indirect prompt injection attacks (https://github.com/greshake/llm-security https://github.com/greshake/llm-security), but I think he is wrong.