6 ms·
Yeah, and if this can also automatically send mails, we not only have prompt injection but also data exfiltration.
by splitbrain 1y ago
Yeah, and if this can also automatically send mails, we not only have prompt injection but also data exfiltration.
- dbish 1y ago2 things right now, 1) it can only draft emails, requires human in the loop to send still. 2) every email you can think of as resetting the context so at most you can only prompt inject your email and get it classified differently or have the agent try to use one of the available tools just for that email, it won’t impact other emails.