Simon Willison calls it the lethal trifecta: private data, untrusted content, and a way to exfiltrate, all in the same session. A coding agent on your laptop has all three by default. It reads your code (private data), it reads whatever a dependency's README or a fetched URL says (untrusted con...
Source: [Dev.to](https://dev.to/doberman/prompt-filters-are-advisory-enforce-on-the-execution-path-kd4)