> I'd guess that prompt injection is the biggest risk in this setup ... LLM poisoning[0] would be a much greater risk in a locally executed LLM than prompt inj

> I'd guess that prompt injection is the biggest risk in this setup ... LLM poisoning[0] would be a much greater risk in a locally executed LLM than prompt injection, given that the LLM would be in an entirely controlled environment. 0 - https://www.anthropic.com/research/small-samples-poison https://www.anthropic.com/research/small-samples-poison