"Simon Willison documented an accidental indirect prompt injection in a RAG application caused by retrieved documentation containing instructions."
Willison describes a case where retrieved documentation contained instructions that unexpectedly influenced the language model consuming it.
View Source