I haven't directly connected my bug board http://ideasandbugs.com to my AI because I am very aware of prompt injection risks One safe way people mention would be to only give the AI access to collect user bug reports and feature requests, then do pull requests on GitHub that I then review myself before I approve or reject them But you can imagine a benign attacker can prompt a feature request with an elaborate prompt that tells it to add a backdoor to my sites BUT then in that prompt write…