READ THE FULL EPISODE PAGE https://devmesh.tech/podcast/ai-security-beyond-prompt-injection AI security involves more than filtering bad prompts. In Episode 14 of System Prompt, Peter and Val examine the expanding attack surface created by large language models, AI agents, tools, retrieval systems, and external integrations. The discussion covers prompt injection, jailbreaks, system prompt extraction, context poisoning, supply-chain attacks, MCP and tool poisoning, sensitive information disclosure, and the defensive controls needed to reduce risk. The central point is simple: no system prompt or single filter can secure an AI application by itself. WHAT WE DISCUSS • Direct and indirect prompt injection • Skeleton key and crescendo jailbreaks • Context compliance attacks • System prompt extraction • Context and retrieval poisoning • Supply-chain attacks • Tool and MCP poisoning • Sensitive information disclosure • Instruction hierarchy and policy enforcement • Observability, testing, and defensive frameworks KEY TAKEAWAYS PROMPT INJECTION IS ONLY ONE ATTACK PATH Malicious instructions can enter through user input, retrieved documents, webpages, emails, tool responses, memory, or external integrations. Security must cover the entire pipeline, not only the chat interface. UNTRUSTED DATA SHOULD NOT BECOME INSTRUCTIONS AI systems combine system rules, user requests, retrieved content, and tool output. The system must distinguish trusted instructions from untrusted information. Retrieved documents should be treated as data, not authority. TOOLS INCREASE THE CONSEQUENCES OF FAILURE A compromised model response becomes more dangerous when the system can access files, send messages, modify records, execute commands, or call outside services. Tools need least-privilege permissions, strict schemas, validation, and approval boundaries outside the model. OBSERVABILITY IS A SECURITY REQUIREMENT Teams need visibility into prompts, retrieved context, routing, tool calls, permissions, outputs, and failures. Without tracing, it may be impossible to determine whether a bad result came from the model, poisoned context, or an unsafe integration. SECURITY REQUIRES LAYERS Useful defenses include access controls, input handling, output validation, sandboxing, allowlists, retrieval filtering, rate limits, testing, monitoring, and human approval for high-risk actions. No single control will stop every attack. CHAPTERS 00:00 — Celebrating Episode 14 05:14 — Prompt Injection and Defense 12:47 — Crescendo Jailbreak 17:51 — Context Compliance Attacks 34:24 — System Prompt Extraction 41:27 — Supply-Chain Attacks 48:20 — Sensitive Information Disclosure WATCH THE EPISODE https://youtu.be/X2UCeQQVWtc ABOUT SYSTEM PROMPT System Prompt covers AI infrastructure, automation, agents, local models, enterprise platforms, security, and practical implementation.