This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Tim Kellogg
timkellogg.me
did:plc:ckaz32jwl6t2cno6fmuw2nhn
Rule of Two: fighting prompt injection
@simonwillison.net posted on a new phrasing of the Lethal Trifecta that changes one node to “externally communicate OR change state”
in my own work, my version was “OR perform critical actions”
https://simonwillison.net/2025/Nov/2/new-prompt-injection-papers/
2025-11-03T12:31:23.560Z