Lesson 5 of 9 · 7 min read
System Prompt Leakage
System prompt leakage exposes non-public instructions; hidden-context review also considers operational policy and tool definitions. Verify reported extraction against source revisions, distinguish guesses from restricted facts, minimize sensitive context and enforce resource and audience rules independently of model behavior.
free sign-in, no card required
Practise it as an interviewer asks it
Why can't an LLM reliably separate instructions from data, and what does that force you to do architecturally?What is prompt injection, and how is it like and unlike SQL injection?How is securing an LLM application different from ordinary application security, and what stays exactly the same?What is a system prompt for, why do attackers target it, and why is it not a security boundary?Direct or indirect prompt injection: how do you compare their risks?How can an assistant that only outputs text still leak data through images, links and previews?