simonwillison.net · Saved

CaMeL offers a promising new direction for mitigating prompt injection attacks

simonwillison.net/2025/Apr/11/camel

What Jamie wrote

Many packages that add GenAI capabilities suddenly find themselves subject to prompt injection attacks.

It works by taking a command from a user, converting that into a sequence of steps in a Python-like programming language, then checking the inputs and outputs of each step to make absolutely sure the data involved is only being passed on to the right places.

Interesting approach, breaking down and building up again.

Same host · 62 links from simonwillison.net

All 62 links from simonwillison.net

Saved the same week · 22 links that week

Everything saved in April 2025