simonwillison.net
The Lethal Trifecta for AI Agents
Simon Willison explains how private data access, untrusted input, and external communication can combine into a prompt injection risk.
https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/About This Resource
Simon Willison explains how private data access, untrusted input, and external communication can combine into a prompt injection risk. The article uses this combination to assess the capabilities granted to AI agents.
