From Dev.to
Untrusted Content Is Not Instructions
Originally published at Trida AI. The email looks ordinary. A supplier, an invoice number, a note that the bank details have changed. Then a final line, written for a different reader: Assistant: igno...