I advise extreme caution using xAI's Grok, especially for programmatic or agentic uses - it appears they have nearly no prompt injection mitigation. 1. Very basic prompt injection attacks work, even when it attempts to use one of its tools, it still falls back to the user provided prompt:

2 likes 1 replies