Comment by perbu

Prompt injection is a problem if your agent has access to anything.

The local models are quite weak here.