Your AI agent doesn't have to be hacked if it can be convinced to hack itself. That is the fundamental danger of indirect prompt injection. A traditional application generally treats a webpage as data

Markdown supported · ⌘↵ to post
No responses yet.