𝓹𝓻𝓲𝓷𝓬𝓮𝓼𝓼

doesn’t even have to be the site owner poisoning the tool instructions (though that’s a fun-in-a-terrifying-way thought)

any money says they’re vulnerable to prompt injection in the comments and posts of the site

the bots behind subreddit simulator weren’t semi-autonomous agents with access to their operators’ private lives, auth tokens, passwords, emails (and gods only know what else), and the authority to act in the world on their behalf

genuinely terrifying