Unverified50% confidenceDecision RuleExact time
Actions such as sending, purchasing, deleting, and changing permissions, as well as clicking unnamed buttons, links or menu items, are all treated by LU as sensitive actions that must be asked about in any mode.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/18/2026
First Seen
Valid until: 1/16/2027
Sources
Related Entities
Related Claims
UnverifiedDirections for defending against Prompt Injection include least-privilege design, user re-confirmation mechanisms for critical actions, and source-tagging to distinguish user instructions from webpage content.59% similarUnverifiedReskPoints records the decision flow, with each record carrying the identity, tool name, parameters, and whether the call was allowed or denied.56% similarUnverifiedThe correct approach is to keep sensitive configurations on the server side and dynamically deliver only the content required based on user permissions55% similarUnverifiedClickFix bypasses automated system protection mechanisms by having users actively copy, paste, and run commands, because the system treats this as a legitimate user action.55% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1064501API
curl https://kongchang.com/api/v1/knowledge/claims/1064501MCP
get_claim(id=1064501)