From Dev.to
How to Find the Agent Actions a Prompt Injection Can Control
Engineer's view. This is SQL injection without parameterized queries. A database fixed it by sending the query and the values on separate channels. A model reads both in one stream, so it cannot. The...