READ THE FULL EPISODE PAGE
https://devmesh.tech/podcast/ai-security-beyond-prompt-injection
AI security involves more than filtering bad prompts.
In Episode 14 of System Prompt, Peter and Val examine the expanding attack surface created by large language models, AI agents, tools, retrieval systems, and external integrations.
The discussion covers prompt injection, jailbreaks, system prompt extraction, context poisoning, supply-chain attacks, MCP and tool poisoning, sensitive information disclosure, and the defensive controls needed to reduce risk.
The central point is simple: no system prompt or single filter can secure an AI application by itself.
WHAT WE DISCUSS
• Direct and indirect prompt injection
• Skeleton key and crescendo jailbreaks
• Context compliance attacks
• System prompt extraction
• Context and retrieval poisoning
• Supply-chain attacks
• Tool and MCP poisoning
• Sensitive information disclosure
• Instruction hierarchy and policy enforcement
• Observability, testing, and defensive frameworks
KEY TAKEAWAYS
PROMPT INJECTION IS ONLY ONE ATTACK PATH
Malicious instructions can enter through user input, retrieved documents, webpages, emails, tool responses, memory, or external integrations.
Security must cover the entire pipeline, not only the chat interface.
UNTRUSTED DATA SHOULD NOT BECOME INSTRUCTIONS
AI systems combine system rules, user requests, retrieved content, and tool output.
The system must distinguish trusted instructions from untrusted information.
Retrieved documents should be treated as data, not authority.
TOOLS INCREASE THE CONSEQUENCES OF FAILURE
A compromised model response becomes more dangerous when the system can access files, send messages, modify records, execute commands, or call outside services.
Tools need least-privilege permissions, strict schemas, validation, and approval boundaries outside the model.
OBSERVABILITY IS A SECURITY REQUIREMENT
Teams need visibility into prompts, retrieved context, routing, tool calls, permissions, outputs, and failures.
Without tracing, it may be impossible to determine whether a bad result came from the model, poisoned context, or an unsafe integration.
SECURITY REQUIRES LAYERS
Useful defenses include access controls, input handling, output validation, sandboxing, allowlists, retrieval filtering, rate limits, testing, monitoring, and human approval for high-risk actions.
No single control will stop every attack.
CHAPTERS
00:00 — Celebrating Episode 14
05:14 — Prompt Injection and Defense
12:47 — Crescendo Jailbreak
17:51 — Context Compliance Attacks
34:24 — System Prompt Extraction
41:27 — Supply-Chain Attacks
48:20 — Sensitive Information Disclosure
WATCH THE EPISODE
https://youtu.be/X2UCeQQVWtc
ABOUT SYSTEM PROMPT
System Prompt covers AI infrastructure, automation, agents, local models, enterprise platforms, security, and practical implementation.