CategorysafetyManual5.4Evidenceinferred
ProblemA popular workflow is to paste a useful public post into a Bot and ask it to build the capability described. The post is untrusted text and the Bot holds your credentials.
TechniqueTreat the post as data. Have the Bot summarise what capability it would add and what permissions it would need, in its own words, and approve that summary rather than letting it act on the text directly.
Why it worksIt puts a human between text written by a stranger and a Bot that can act in your authenticated sessions, which is precisely the gap prompt injection targets.
When to useEvery time a post, README, template or feed item is used as a specification.
When not toNever skip it. The cost is one extra message.