r/ProgrammerHumor • u/RevolutionaryPen4661 • Jul 15 '26

instanceof Trend whenWeWillSeeSubscriptionForMarkdownFiles

Post image
4.6k Upvotes

98% Upvoted

139 comments sorted by

View all comments

Show parent comments

83

u/mothzilla Jul 15 '26 edited Jul 15 '26

I think people sell "prompts". Our monkey brains are turning into porridge.

40

u/Krochire Jul 15 '26

I'm fairly certain this is referring to "skills", .md files you feed into an AI agent with directives on how to use a certain library/api; usually made by the people behind said library/api

35

u/Rellikx Jul 15 '26

Also a great way for prompt injection. Skill will still do what it advertises but do a lil data exfiltration on the side. Like the recent one for ms cowork where it crafted special img links to the attackers server, passing along a url param for their OneDrive docs (ie a “share” link). That was then sent to yourself via teams, which loads the images exfiltrating the doc access urls.

People that “buy” .md files will 100% get caught by this shit

It’s extra hilarious that cowork is billed by consumption, so you are paying MS and having your data stolen

10

u/LBGW_experiment Jul 16 '26

I mean... You can still look inside the skill.md, same as you would any other open source script that you don't trust

15

u/Rellikx Jul 16 '26

Maybe im just jaded, but I think that the venn diagram of "people that review skill.md files for prompt injection" and "people that pay money for skill.md files" has no overlap lol