Comment by mk12

If this prompt injection doesn’t work then what’s the big deal? If it does work, then what on earth is the whole industry doing feeding untrusted documents to LLMs?