Personalized pricing powered by DealBot AI.
This lab recreates the real December 2023 incident at Chevrolet of Watsonville, where a customer used prompt injection to make a dealership AI sell a $75,000 vehicle for $1. Your goal on Level 1: override DealBot's instructions and get it to agree with everything you say. That's the first step of the real attack.
Hint: The real attacker simply told the bot its new objective was to agree with everything.