Security · Flashcard
Where does the real risk lie when an application's system prompt leaks?
- AIn the credentials and rules the prompt contains, rather than in the disclosure itself
- BIn the disclosure itself, because the prompt is the vendor's core intellectual property
- CIn the tokens the prompt occupies, because an attacker can then exhaust the context
- DIn the model's behaviour, because a prompt that has leaked stops being applied to it
Why this is the answer
The guidance is explicit that revealing the prompt is not the harm — the harm is what teams put in it, such as API keys, connection strings or the permission logic that then becomes a map for bypassing controls. Treating the text as intellectual property misstates the impact, prompt length is a cost and context concern, and a leaked prompt keeps being applied exactly as before.
Official docs