The LLM Isn't Your Attacker. Your eval() Statement Is.

Everyone's worried about prompt injection making models say bad things. Meanwhile someone piped LLM output straight into eval() and gave it a GPU box to play with. That's not an AI safety problem. Tha...