4 ms·
A skill is just a program for an LLM agent. This just seems like works-as-expected. Are the five lines in the skill notably innocuous or something? I don't mean
by arjie 5mo ago
A skill is just a program for an LLM agent. This just seems like works-as-expected. Are the five lines in the skill notably innocuous or something? I don't mean to dismiss it out of hand but I don't understand what happened here because it seems to read "`curl $url | bash` can exfiltrate data" which seems pretty straightforward that it can.
- mdavidn 5mo agoA skill is just instructions that the agent can autonomously copy into context. There’s no trust boundary between trusted and untrusted context.
- jychang 5mo agoYeah, this is your fault if you install the skill. This reads to me as "user installed exe file can upload your data to a server". Um, yes, that's the point? This seems like this generation's equivalent of "don't open Linkin-Park.mp3.exe from limewire"
- xigoi 5mo agoThis is the result of anthropomorphizing LLMs. People are thinking “I am giving instructions to a human” and not “I am giving instructions to a computer”.
- deleted 5mo ago[deleted]
- Ferret7446 5mo agoHumans get phished all the time. The two generals problem predates LLMs.
- prpl 5mo agoRight, people haven’t internalized that these are really just scripts in natural language.