Unverified50% confidenceOpinionExact time
A prompt is essentially a request that can be ignored or bypassed, so it cannot serve as a security constraint mechanism for an Agent.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSystem prompts should not be relied upon as security boundaries for AI agents, as prompts are suggestions rather than enforcement.74% similarUnverifiedThe focus of defending against indirect prompt injection cannot be on 'identifying malicious text' but must be on capability constraints—even if the agent is persuaded to call a tool, the system should have the authority to refuse that call.73% similarUnverifiedDefensive prompting uses redundant, repeatedly emphasized language to explicitly tell the model what it should not do, compensating for the model's limitations in tracking state across shots.68% similarUnverifiedSome models will directly refuse requests to pretend to be offended due to safety mechanisms68% similarUnverifiedPrompt级约束是建议性而非强制性的，大模型可能因上下文压力、目标导向或幻觉跳过确认步骤67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1044801API
curl https://kongchang.com/api/v1/knowledge/claims/1044801MCP
get_claim(id=1044801)