Hacker News new | ask | show | jobs
by dweinus 36 days ago
I believe it is the other way around: the LLM decides the type of action and the input to the action; the code validates the permission to act and the acceptability of the input. But, yes it is very different than SQL injection in that way.