Attached a pretty cool article covering it. This is something I never would have thought of before.

you are viewing a single comment's thread
view the rest of the comments
[–] 14 points 1 year ago (3 children)

That's not the LLM that understand your encoded string, it's simply a preprocessing filter recognizing the signature of a base64 encoded string that decodes it and pass it back to the LLM.

  • source
  • hideshow 3 child comments
  • [–] 4 points 1 year ago

    Agreed, this is a relatively simple "tool" as the LLM parlance goes. It's what Model Context Protocol (MCP) is designed to facilitate

    To verify, the author should try the same prompts on a local LLM with no tools enabled and most likely the LLM will respond with some nonsense

  • source
  • parent