3 ms·
The primary risk with these browser agents is prompt injection attacks. Running it locally doesn't help you in that regard.
by onesociety2022 1y ago
The primary risk with these browser agents is prompt injection attacks. Running it locally doesn't help you in that regard.
- innagadadavida 1y agoIf each LLM sessions is linked to the domain and restricted just like how we restrict cross domain communication, this problem can be solved? We can have a completely isolated LLM context per each domain.
- medhir 1y agoTrue, I wasn’t thinking very deeply when I wrote this comment… local models indeed are prone to the same exploits. Regardless, giving a remote API access to a browser seems insane. Having had a chance to reflect, I’d be very wary of providing any LLM access to take actions with my personal computer. Sandbox the hell out of these things.