A similar setting is explored in this running CTF challenge: https://invariantlabs.ai/ctf-challenge-24 https://invariantlabs.ai/ctf-challenge-24 Basically, LLM

A similar setting is explored in this running CTF challenge: https://invariantlabs.ai/ctf-challenge-24 https://invariantlabs.ai/ctf-challenge-24 Basically, LLM apps that post to link-enabled chat feeds are all vulnerable. What is even worse, if you consider link previews, you don't even need human interaction.