medium10 pts · first answer countsllm-safetyoutput-handling

Model output passed to a shell

Code runs subprocess.run(f"convert {filename_from_llm} out.png", shell=True), using a file name the model extracted from user text. What is the risk?

A.The image will be converted in the wrong colourB.The model will refuse to give a file nameC.Only a slower conversion, with no security issueD.Command injection, e.g. a name containing "; rm -rf ~"

Discussion 0

Join free to post in the discussion.

Model output passed to a shell

Discussion 0

Related questions