[almoehi]

Sounds like LLMs having their SQL injection equivalent moment.

I’d also say this described phenomenon isn’t new - except for it’s applied context: it’s essentially disinformation - a well known technique used by military since decades. Except now we hack LLM agents instead of real people’s minds.

Nonetheless interesting to watch.

[falcor84]

Yup, I think this is analogous to a "Second Order SQL Injection"