3 ms·
The problem with this is that you have to give your LLM basically unbounded access to everything you have access to, which is a recipe for pain.
by empath75 1y ago
The problem with this is that you have to give your LLM basically unbounded access to everything you have access to, which is a recipe for pain.
- the_mitsuhiko 1y agoNot necessarily. I have a small little POC agentic tool on my side which is fully sandboxed, an it's inherently "non prompt injectable" by the data that it processes since it only ever passes that data through generated code. Disclaimer: it does not work well enough. But I think it shows great promise.