netrunner(@plotarmordev):‼️ A local model won't save you from prompt injection. It keeps your data off someone else's servers. But the attack lives in what your agent reads like a web page, a README, an issue comment etc. If the model follows instructions hidden in there, it acts with whatever access you gave it, on your GPU or anyone's. My default: agents that browse or read repos get a scoped, read-only token and no shell. Only the one that really needs more gets more.

netrunner

@plotarmordev

Cofounder & engineer. Running local AI, building things with it, and sharing what I learn.

加入 April 2022

806 正在关注 8.4K 粉丝

netrunner@plotarmordev

2026.11.01 10:30

‼️ A local model won't save you from prompt injection. It keeps your data off someone else's servers. But the attack lives in what your agent reads like a web page, a README, an issue comment etc. If the model follows instructions hidden in there, it acts with whatever access you gave it, on your GPU or anyone's. My default: agents that browse or read repos get a scoped, read-only token and no shell. Only the one that really needs more gets more.

显示更多