Home

Anti-Patterns — Prompt Injection I

The first five prompt-injection anti-patterns — treating the system prompt as a secret store, wiring an unauthenticated tool channel, conflating trusted and untrusted context, promoting a comment straight to a commit, and grounding on a poisoned knowledge base.