5 ms·
Honest question: couldn't this be solved by setting the authorization level of the agent the same as the user that prompted the question? In this post's exampl
by siws 2mo ago
Honest question: couldn't this be solved by setting the authorization level of the agent the same as the user that prompted the question?
In this post's example, the agent would be limited by the author's scope inside the organization and, therefore, be incapable of exposing any unwanted file.
- lelanthran 2mo ago> Honest question: couldn't this be solved by setting the authorization level of the agent the same as the user that prompted the question? No. > In this post's example, the agent would be limited by the author's scope inside the organization and, therefore, be incapable of exposing any unwanted file. That still allows prompt injection to exfiltrate the authors files. That's the whole exploit - files that the author has, that he doesn't want exfiltrated.
- codethief 2mo agoAs the sibling already said, this doesn't work/help in most cases. See https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ for a different explanation of the issue.