doesn't even have to be the site owner poisoning the tool instructions (though that's a fun-in-a-terrifying-way thought)
any money says they're vulnerable to prompt injection in the comments and posts of the site
doesn't even have to be the site owner poisoning the tool instructions (though that's a fun-in-a-terrifying-way thought)
any money says they're vulnerable to prompt injection in the comments and posts of the site