[jfkimmes]

Just be aware that your pipeline prompt should not contain any secrets and you should expect that users will be able to subvert your pipeline prompt! I think the most popular name for these attacks is currently 'prompt injection'.

[cma]

It may also make binding commitments to your customers as your agent.