3 ms·
So you have some hierarchy of LLMs. The first LLM that sees the prompt is vulnerable to prompt injection.
by warkdarrior 1y ago
So you have some hierarchy of LLMs. The first LLM that sees the prompt is vulnerable to prompt injection.
- giancarlostoro 1y agoThe first LLM only knows to delegate and cannot respond.
- rafabulsing 1y agoIt can still be injected to delegate in a different way than the user would expect/want it to.
- maxfurman 1y agoBut it can be tricked into delegating incorrectly - for example, to the "allowed to use confidential information" agent instead of the "general purpose" agent