Cianplan

Level 5: AI / LLM systems · L5.6 Evals & guardrails

Prompt injection

Explain direct and indirect injection and why it's hard to fix.

12 min · Pro

What you take away

  • Instructions and data reach the model through the same channel with no privileged band, so there is no parameterised prompt the way there is a parameterised query.

And 3 more inside the class, in Pro.

How the class is laid out

  1. The problem
  2. A fake road sign on the route
  3. Why this is not a prompt-engineering problem
  4. Check your understanding