The first LLM only knows to delegate and cannot respond. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		giancarlostoro 4 months ago \| parent \| context \| favorite \| on: Weaponizing image scaling against production AI sy... The first LLM only knows to delegate and cannot respond.

maxfurman 4 months ago | [–]

But it can be tricked into delegating incorrectly - for example, to the "allowed to use confidential information" agent instead of the "general purpose" agent

rafabulsing 4 months ago | [–]

It can still be injected to delegate in a different way than the user would expect/want it to.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact