@charrondev >I’m not worried about prompt Injection because if the user was actually malicious they could just used the interface or the API to do the same thi

@charrondev >I’m not worried about prompt Injection because if the user was actually malicious they could just used the interface or the API to do the same thing. I think you might have missed that the injected prompt might not come from the end user. There was an example of someone adding a prompt injection to their LinkedIn profile to override a recruiter's prompt and generate an embarrassing email instead. Not sure if it's fake, but it demonstrates the point either way.