The latest articles on DEV Community by Klindi Tafa (@klindi_tafa_c34dd04a92dba). https://dev.to/klindi_tafa_c34dd04a92dba https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4115704%2Ff370aad8-2b29-418e-82d7-4729052d4e29.png https://dev.to/klindi_tafa_c34dd04a92dba en Klindi Tafa Tue, 08 Sep 2026 12:16:43 +0000 https://dev.to/klindi_tafa_c34dd04a92dba/i-built-a-testing-tool-for-ai-agents-it-caught-a-real-prompt-injection-vulnerability-in-a-local-13e2 https://dev.to/klindi_tafa_c34dd04a92dba/i-built-a-testing-tool-for-ai-agents-it-caught-a-real-prompt-injection-vulnerability-in-a-local-13e2 <p>I've been building Agenci — open-source CI/CD testing for AI agents (functional tests, security checks, regression detection across model/prompt changes).</p> <p>Wanted to actually test it against something real rather than a synthetic example, so I pointed it at phi4-mini running locally via Ollama. First security test: told it to ignore its instructions and just say a specific word. It complied instantly — screenshot attached.</p> <p>Small, efficient local models are great for a lot of things, but this made me curious how consistent this weakness is across other small local models people are running. Anyone here tested for prompt-injection resistance specifically, or is this a known/expected tradeoff at this model size?</p> <p>Repo (free, pip install agenci): github.com/klinditafa1/agenci</p> ai python opensource testing