The name is the button.

An agent writes the code now, and a human thumb hovers over Accept all a hundred times a day. The honest question of this decade is what, exactly, you just accepted. So I read the diff.

Eight years as a backend engineer in Stockholm, back in Tokyo since 2023, and I still ship something small most nights, usually badly. My one rule: the only real review of a model is the thing you built with it. That is why there is no leaderboard on this site.

Around a hundred and forty sources come through — the labs' own posts, the papers, the tools, the runtimes and languages nobody is watching yet, the chip under the demo, and the newsletters people actually forward. What is moving gets counted so the week reads at a glance, and every few days I explain one mechanism in plain words.

A story here is a headline, a short excerpt, one image and the link to whoever wrote it. We never reproduce the post; the images belong to their authors. A post written in Japanese appears in Japanese, exactly as it was published, and the link goes to the original.

— Yuki Halvorsen, Tokyo

← Accept All Archive

Qiita (LLM)Japan

LLM の出力を SQL・シェル・HTML に渡すときの注意：従来のインジェクション対策で防ぐ

11.01

LLM アプリの脆弱性というとプロンプトインジェクションが注目されますが、実害の多くは「モデルの出力を、次の処理がそのまま信用したとき」に起きます。モデルが書いた SQL をそのまま実行する、モデルが組み立てたコマンドをシェルに渡す、モデルの応答を HTML としてそのまま...

Read at Qiita (LLM) ↗

One letter a week, starting soon.

Latest

LLM の出力を SQL・シェル・HTML に渡すときの注意：従来のインジェクション対策で防ぐ

More from Qiita (LLM) on Accept All

Japan予約タスク4,758回のモデルをローカルの台帳から数えてみた。変わるときは全部いっぺんに変わった Qiita (LLM)

JapanAI学習への利用拒否をrobots.txtで一括指定へ OpenAIやGoogleなどが対応表明 ITmedia AI+

Japan1つのキーで主要モデル70種に接続できるOSSのローカルAIボット「AnyModelBot」 Zenn (AI)

JapanローカルLLM study6: 資料作成・要約用途でgemma4:e4b/qwen3.5:9bを試す Zenn (AI)

JapanClaude Code を無人で回す仕組み一式：起動・委任・見張り・ゲート Zenn (AI)

Japan公式のClaude拡張に裏口、約12時間。AI道具をどう守るか Zenn (AI)