If you're building agents, this is worth knowing. Simon Willison (who coined the term "prompt injection") describes three capabilities that are individually fine but devastating together, the lethal trifecta includes: 1. Access to private data (such as internal databases, emails, etc.
Source: [Hacker News](https://www.getjailbroken.com/)