prompt-injection

2 posts · all tags

  • Agent Skills Are a Supply Chain, Not a Config File

    A skill looks like documentation. It is a folder with a Markdown file in it, and installing one is git clone or a drag into a directory. Nothing about that gesture feels like adding a dependency.

    It is adding a dependency. The file tells your agent what to do, and it does it with whatever privileges you already granted — with none of the review you would give a package that arrived through a lockfile.

  • Prompt Injection Is Not a Filtering Problem

    Every few weeks someone announces they have solved prompt injection with a classifier that scores incoming text for maliciousness. Every few weeks someone else gets past it with a base64 blob, a poem, or a sentence in Portuguese.

    This will keep happening, because the framing is wrong. Prompt injection is not spam that needs better filtering. It is the natural consequence of an architecture where instructions and data travel in the same channel.