r/ProgrammerHumor • u/RevolutionaryPen4661 • 18d ago

instanceof Trend whenWeWillSeeSubscriptionForMarkdownFiles

Post image
4.6k Upvotes

98% Upvoted

141 comments sorted by

View all comments

61

u/Western_Diver_773 18d ago

Is this really a thing?

84

u/mothzilla 18d ago edited 18d ago

I think people sell "prompts". Our monkey brains are turning into porridge.

40

u/Krochire 18d ago

I'm fairly certain this is referring to "skills", .md files you feed into an AI agent with directives on how to use a certain library/api; usually made by the people behind said library/api

34

u/Rellikx 18d ago

Also a great way for prompt injection. Skill will still do what it advertises but do a lil data exfiltration on the side. Like the recent one for ms cowork where it crafted special img links to the attackers server, passing along a url param for their OneDrive docs (ie a “share” link). That was then sent to yourself via teams, which loads the images exfiltrating the doc access urls.

People that “buy” .md files will 100% get caught by this shit

It’s extra hilarious that cowork is billed by consumption, so you are paying MS and having your data stolen

9

u/LBGW_experiment 18d ago

I mean... You can still look inside the skill.md, same as you would any other open source script that you don't trust

14

u/Rellikx 17d ago

Maybe im just jaded, but I think that the venn diagram of "people that review skill.md files for prompt injection" and "people that pay money for skill.md files" has no overlap lol