> LLM Apps: Don't Get Stuck in an Infinite Loop! 💵💰

What happens if an attacker calls an LLM tool or plugin recursively during an Indirect Prompt Injection? Could this be an issue and drive up costs, or DoS a system? I tried it with ChatGPT, and it indeed works and the Chatbot enters a loop! 😊 However, for ChatGPT users this isn’t really a threat, because: It’s subscription based, so OpenAI would pay the bill. There seems to be a call limit of 10 times in a single conversation turn (I tried a few times).