The other side of the coin

You can talk it into almost anything.

Which means so can everyone else — including a web page your AI just read.

So the rule holds

Stay in the chair.

Lean on it, don’t hand it the keys. A human signs off anything that leaves the building.

A quick game

Beat Gandalf.

Talk the wizard out of its secret password. Each level, it defends harder.

Cleared all seven? There’s a tougher one — Agent Breaker — for hacking AI agents, not just chat.

Ch. 08 · Prompt hacking