This is why LLMs should not be used as AI agents. They suck at following simple instructions AND stopping there.
What we need is dedicated translators that turn your instructions into executable code - an AI scripting language, if you will - and use limited language models to process text based on those instructions.
By mixing “code” (instructions) and “data” (text to read / analyze) into these models’ training, prompt injection was just waiting to happen.
OpenAI and friends are just repeating Microsoft’s mistakes. Remember MS Word viruses? Exactly the same thing.
This is why LLMs should not be used as AI agents. They suck at following simple instructions AND stopping there.
What we need is dedicated translators that turn your instructions into executable code - an AI scripting language, if you will - and use limited language models to process text based on those instructions.
By mixing “code” (instructions) and “data” (text to read / analyze) into these models’ training, prompt injection was just waiting to happen.
OpenAI and friends are just repeating Microsoft’s mistakes. Remember MS Word viruses? Exactly the same thing.