Stack Builders - When Text Becomes Code: Securing LLM–Database Integrations

Connecting LLMs to production databases turns user conversations into executable code, exposing live data to prompt-injection-driven SQL manipulation and exfiltration that defenders must mitigate with layered controls.

A technical guide based on a Quito Lambda talk demonstrating how prompt injection (direct, indirect, and confused-deputy/exfiltration) can compromise LLM applications that generate SQL over a live Postgres database, using an example LLM-powered SQL analyst with a Streamlit frontend. It walks through layered defenses and what they stop or fail to stop.