<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Prompt-Injection on Sameer Ankalgi</title><link>https://www.sameerankalgi.com/tags/prompt-injection/</link><description>Recent content in Prompt-Injection on Sameer Ankalgi</description><generator>Hugo</generator><language>en</language><copyright>© {year} Sameer Ankalgi · Zürich</copyright><lastBuildDate>Tue, 18 Aug 2026 01:00:00 +0200</lastBuildDate><atom:link href="https://www.sameerankalgi.com/tags/prompt-injection/index.xml" rel="self" type="application/rss+xml"/><item><title>Your prompt injection defenses may not compose</title><link>https://www.sameerankalgi.com/ai-safety/prompt-injection-defenses-may-not-compose/</link><pubDate>Tue, 18 Aug 2026 01:00:00 +0200</pubDate><guid>https://www.sameerankalgi.com/ai-safety/prompt-injection-defenses-may-not-compose/</guid><description>I benchmarked stacked prompt injection defenses across four open-weight models. Two defenses that each work fine alone can block 100% of benign traffic when you chain them.</description></item></channel></rss>