Output from the language model is also being injected into a script that is then executed: https://github.com/jjuliano/aifiles/blob/ef529fd6281eaf8d373fc3c3704a

Output from the language model is also being injected into a script that is then executed: https://github.com/jjuliano/aifiles/blob/ef529fd6281eaf8d373fc3c3704a9c61cc48384b/src/utils.ts#L626 https://github.com/jjuliano/aifiles/blob/ef529fd6281eaf8d373... He argued below that he is not vulnerable to indirect prompt injection attacks (https://github.com/greshake/llm-security https://github.com/greshake/llm-security), but I think he is wrong.