Rather than adding an agents.md file written to stop LLM agents, I’m thinking about putting random comments into my code telling the agent to stop and warn the user, also some comments that are just word salads/non-sequiturs.
Rather than adding an agents.md file written to stop LLM agents, I’m thinking about putting random comments into my code telling the agent to stop and warn the user, also some comments that are just word salads/non-sequiturs.
LLM generated code does usually include comments, so I’m guessing they do read the comments in code anyways.
As long as the poisoning doesn’t disrupt normal usage, I’d say poison away with your comments.
At some points, I also did that level of commenting, mainly to guide a human to write stuff, or as a form of rubberducking (did fix a lot of issues of mine).