|
|
|
|
|
|
by NitpickLawyer
5 days ago
|
|
|
> MCP integrations are certainly different channels than the prompt stream input by the user. If the result from the MCP call includes something from the outside (i.e. an API call result, some content from a web page, etc.) then you are back to the same problem of everything being context. This is something inherent to LLMs. You can filter for known things as you say, but all you can do is mitigate some attacks, not all. I was replying to someone saying "don't use untrusted inputs". The surface for LLMs is potentially everything, in this case. |
|
|