Part 11 · AI Security
Prompt Injection
Direct injectionIndirect injectionTrust boundariesDefences
A web page tells your agent to email its secrets, and the agent does it. Direct and indirect prompt injection, why no prompt fully stops it, and the defences that do help.
⏱ 1-2 hours · Station 86 of 92