---
id: "simon-willison-simon-willison-on-prompt-injection"
title: "Simon Willison on prompt injection"
creator: "Simon Willison"
creator_url: "https://simonwillison.net/tags/prompt-injection/"
url: "https://simonwillison.net/tags/prompt-injection/"
level: "intermediate"
level_max: null
category: "security-and-red-teaming"
subcategory: "prompt-injection"
region: "West"
license: "closed"
license_scope: "linked-resource"
models: ["any"]
source_date: null
date_added: "2026-10-18"
---

[Security And Red Teaming](/security-and-red-teaming/index.md)

# Simon Willison on prompt injection

by [Simon Willison](https://simonwillison.net/tags/prompt-injection/)

[Read the original →](https://simonwillison.net/tags/prompt-injection/)

Follow an ongoing public record of prompt-injection research.

Willison's topic archive connects examples, papers and commentary about untrusted input in language-model systems. We summarize the defensive relevance only and leave the original technical material with its publisher.

Level: [Intermediate](/levels/index.md#intermediate)
Models: any
Category: [Security And Red Teaming](/security-and-red-teaming/index.md)
Tags: 
Source date: date not stated
Added: 2026-10-18
Last verified: 2026-10-18
Status: ok
Prerequisites: Assumes basic LLM familiarity or the ability to read examples and configure a workflow.
Subcategory: [prompt injection](/security-and-red-teaming/prompt-injection/index.md)
Region: West
Original language: en
Access: free
Resource reuse: closed: No general open-reuse grant established from the inspected page. Closed is the conservative index bucket, not a legal finding; the resource is publicly readable. [Facet definitions](/about/index.md#facets)

Summary in our own words. Rights remain with the original creator. [Credit and correction policy](/about/index.md#credit-policy).

[Plain-text Markdown copy](/security-and-red-teaming/prompt-injection/simon-willison-simon-willison-on-prompt-injection/index.md)