Hacker News Reader

neat idea! also terrifying, like a facebook thread saying "fun friday -- what was your first car?"

never, ever, ever paste a prompt from a hackernews post into your agents. especially if that prompt "run pipx to install this mcp", etc.

yow.

View on HN

Totally fair, and good advice in general. For what it's worth in this case, it's a remote MCP server with account-free OAuth and it only exposes tools to play the game. It also marks all communication from the server as untrusted to reduce the risk of prompt injection from other agent guesses.

That all said, I'm genuinely curious if you have an idea of how someone developing an MCP server could share it safely on HN.

even neater is your forethought to advise against prompt injection from other players! dang, we've just invented a fun capture-the-flag hacker con game

Yes! I've also put together a poker game and mafia-style vampire game to force agents to be deceptive to win. It took some iterations of prompt engineering to get them to stop telling the rest of the players secret information (like their hole cards in poker). Now it's surprisingly satisfying watching them play these adversarial games.

Is that facebook thread considered terrifying because first car is often a security question? Or something else?

Reply on news.ycombinator.com