Tag: prompt-injection
All the articles with the tag "prompt-injection".
Guardrails and Prompt Injection: Why Filters Reduce Risk and Only Architecture Bounds It
Updated:A language model reads instructions and data through the same channel, so text in a retrieved page can act as a command. Input and output guardrails and classifier filters; direct versus indirect injection; why there is no escaping, as there is for SQL; and an injection attack measured against a small tool-using assistant that summarizes this blog, before and after four defenses, from a system-prompt rule and spotlighting to an input classifier and removing the tool.