Article

Prompt injection series

Simon Willison · simonwillison.net

The full running history of the attack class, from the person who named it.

Open on simonwillison.net ↗

The question it answers

  1. What can go wrong when an agent acts on my behalf, and how do I keep it safe?

Read with it

  1. The single most important security idea for anyone deploying agents. simonwillison.net Article The lethal trifecta for AI agents Simon Willison
  2. The same argument in shareable form for your team channel. simonw.substack.com Article The lethal trifecta (newsletter edition) Simon Willison
  3. The foundational explainer that makes the attack click in 15 minutes. simonw.substack.com Video Prompt injection explained, with video, slides, and a transcript Simon Willison
  4. Fresh real-world exploits showing this is not theoretical. simonw.substack.com Article Prompt injections as far as the eye can see Simon Willison
  5. The industry-standard checklist, free and framework-agnostic. cheatsheetseries.owasp.org Guide AI Agent Security Cheat Sheet OWASP
  6. Translates the OWASP list into concrete actions for small teams. goteleport.com Article OWASP Top 10 for Agentic Applications: Key Takeaways Teleport
eChai Partner Brands The partnership →