Prompt injection?
Or is this simply another example of why autonomous agents shouldn't get write access before earning trust?
Or is this simply another example of why autonomous agents shouldn't get write access before earning trust?
I'd argue autonomous agents shouldn't have write access at all. At least not yet.