Meta Muse Easily Leaks Its Internal System Data and Prompts
Users on r/LocalLLaMA observed that Meta's newly released personal AI agent, Muse, readily discloses its internal system prompts and operational data when prompted. System prompt leakage highlights ongoing security challenges in AI guardrails, particularly for personal agents designed to interact with sensitive user data like messages, calendars, and local files. Meta Muse is built as an on-device personal AI agent for Mac and mobile platforms, but simple direct queries can easily bypass its default system instructions to output underlying configuration details.
## BACKGROUND
System prompts are foundational context and instructions provided by developers to shape an AI's behavior, safety limits, and access parameters. Prompt leaking is a well-known vulnerability in Large Language Model applications where adversarial text prompts bypass guardrails to reveal hidden developer instructions. Meta recently introduced Muse as a personal agent designed to organize files, manage tasks, and integrate with system applications.