Article

The lethal trifecta for AI agents

Simon Willison · simonwillison.net

The single most important security idea for anyone deploying agents.

Open on simonwillison.net ↗

The question it answers

  1. What can go wrong when an agent acts on my behalf, and how do I keep it safe?

Read with it

  1. The same argument in shareable form for your team channel. simonw.substack.com Article The lethal trifecta (newsletter edition) Simon Willison
  2. The full running history of the attack class, from the person who named it. simonwillison.net Article Prompt injection series Simon Willison
  3. The foundational explainer that makes the attack click in 15 minutes. simonw.substack.com Video Prompt injection explained, with video, slides, and a transcript Simon Willison
  4. Fresh real-world exploits showing this is not theoretical. simonw.substack.com Article Prompt injections as far as the eye can see Simon Willison
  5. The industry-standard checklist, free and framework-agnostic. cheatsheetseries.owasp.org Guide AI Agent Security Cheat Sheet OWASP
  6. Translates the OWASP list into concrete actions for small teams. goteleport.com Article OWASP Top 10 for Agentic Applications: Key Takeaways Teleport
eChai Partner Brands The partnership →