I wrote a test for prompt injection. It passed while the attack worked.

This is a submission for DEV's Summer Bug Smash: Smash Stories powered by Sentry . I maintain a small CLI called llm-council . It puts one question to several models, hides the authorship, and has them rank each other's answers.

Source: [Dev.to](https://dev.to/mk023/i-wrote-a-test-for-prompt-injection-it-passed-while-the-attack-worked-kc9)