2 ms·
The first LLM only knows to delegate and cannot respond.
by giancarlostoro 1y ago
The first LLM only knows to delegate and cannot respond.
- rafabulsing 1y agoIt can still be injected to delegate in a different way than the user would expect/want it to.
- maxfurman 1y agoBut it can be tricked into delegating incorrectly - for example, to the "allowed to use confidential information" agent instead of the "general purpose" agent