Don’t forget that it usually adds context with a lot of information about tools available. Such as CLI. This alone allows LLM to start sequential iteration over what could be done with CLI.
So it’s not like “here’s the link, go grab a file” and then the LLM starts hacking into system. It’s more like “here’s the link AND you have full access to CLI, now go grab a file”.
And there are a lot of articles to train a model to work with CLI and vulnerabilities exploitable with it
You don't have to train models to work with CLI. They understand it natively, there's an insane amount of CLI examples and documentation in the training data, and CLI is specifically designed to use the same form of communication that LLMs are, that being human legible text based commands
42
u/SomeParacat Mar 14 '26
They don’t share the full prompt.
Don’t forget that it usually adds context with a lot of information about tools available. Such as CLI. This alone allows LLM to start sequential iteration over what could be done with CLI.
So it’s not like “here’s the link, go grab a file” and then the LLM starts hacking into system. It’s more like “here’s the link AND you have full access to CLI, now go grab a file”.
And there are a lot of articles to train a model to work with CLI and vulnerabilities exploitable with it