THOUGHTS ON PROMPT INJECTION OPSEC

Summary from the TLDR InfoSec newsletter

Prompt injection prompts are akin to 0days and should not be published. Prompt injection prompts that are not customer-specific should be shared because attackers already have access to prompt injection strings, so the benefit to defenders of seeing real-world threats outweighs the risks.