Prompt Injection
How an instruction hidden in a document can enter an AI system and which controls separate reading from action.
Links containing ?t= open the video at a specific second.
Video summary
The ideas to retain
1. The problem starts when a document reaches the model
The most common mistake is to treat prompt injection as an exotic version of “write a better system prompt.” That confuses the symptom with the cause.
2. The instruction can appear in a document search
In a simple chat, the attacker still speaks directly to the model. That is already a problem, but the risk remains relatively contained: the malicious input and the effect stay within the…
3. Filtering words does not separate data from instructions
When prompt injection appears, the natural reaction is to add filters: lists of forbidden words, detectors for dangerous instructions, query rewriting, perplexity filters, masking, an…
Next step
