logoalt Hacker News

truelsonyesterday at 4:08 PM1 replyview on HN

You're wiring up a number of critical systems... and prompt injection here could be really bad. I worry about such systems with a single point of contact


Replies

jedbergyesterday at 4:58 PM

Reading through it, I didn't see any mention of write access. It looks like the agent is strictly read-only with access controls.