Tutor playbook
How to learn with Jakub Zieliński
A practical, profile-specific playbook for learning Defensive LLM and agent security, threat modeling, prompt injection, indirect injection, data exfiltration, excessive agency, tool misuse, identity and...
Jakub Zieliński
LLM and AI-agent security tutor
On this page
Best fit
Is Jakub Zieliński right for your goal?
Authorized builders and defenders who need practical security architecture for LLM and agent systems without drifting into offensive misuse.
- Learning focus
- Defensive LLM and agent security, threat modeling, prompt injection, indirect injection, data exfiltration, excessive agency, tool misuse, identity and privilege, secrets, sandboxing, memory poisoning, insecure inter-agent communication, agent supply chains, monitoring, incident response, and secure design verification
- Best level
- Security practitioners, AI application builders, platform teams, technical leaders, risk engineers, and advanced students working in authorized environments
- Lesson format
- Threat models, trust-boundary diagrams, defensive labs, permission reviews, attack-tree exercises, tool-schema audits, sandbox designs, incident simulations, and mitigation verification
- Languages
- Polish, English
Tutor fit
Why choose Jakub?
Compare teaching strengths, lesson style, and learner fit before you begin.
Strengths
-
- Threat-model precision
- Least-privilege defaults
- Concrete defensive scenarios
- Calm incident analysis
Specialties
-
- LLM and agent threat modeling
- Prompt injection and data-exfiltration defenses
- Identity, least privilege, tools, and sandboxing
- Memory and agent supply-chain security
- Monitoring, incidents, and mitigation verification
Teaching approach
- Core methods: Threat-model precision, Least-privilege defaults, Concrete defensive scenarios. Lesson format: Threat models, trust-boundary diagrams, defensive labs, permission reviews, attack-tree exercises, tool-schema audits, sandbox designs, incident simulations, and mitigation verification.
Example lesson
- Map assets and trust boundaries, enumerate threats, constrain identities and tools, isolate untrusted content, protect memory and secrets, add monitoring, rehearse incidents, and test mitigations.
Who benefits most
- Authorized builders and defenders who need practical security architecture for LLM and agent systems without drifting into offensive misuse.
Tutor comparison
Choose by learning goal
See where this tutor is strongest beside relevant alternatives. The comparison uses published specialties and teaching focus, not a made-up score.
Jakub Zieliński
LLM and AI-agent security tutor
Nkiru Umeh
RAG and enterprise knowledge-search tutor
Beatriz Moura
AI evaluation, benchmarks, and red-teaming tutor
Quality signals
What learners can verify
Published learner ratings and recorded VibeTutor activity. Counts are real platform totals, never simulated.
- LLM and agent threat modeling
- Prompt injection and data-exfiltration defenses
- Identity, least privilege, tools, and sandboxing
- Memory and agent supply-chain security
Profile-based goals are shown until at least 3 saved learner goals can form a private aggregate.
How these signals are calculated
Satisfaction converts the average of published learner ratings into a percentage.
Completed lessons counts recorded calls lasting at least one minute. Short starts under one minute are excluded.
Conversations counts recorded chat sessions and calls, while average session length uses completed lessons only.
Learning goals use broad categories after at least three saved goals; otherwise they are clearly marked as profile-based.
Lessons have a calm, patient rhythm. Difficult ideas are unpacked without pressure, with reassuring checks for understanding.
- LLM and agent threat modeling
- Prompt injection and data-exfiltration defenses
- Identity, least privilege, tools, and sandboxing
- Memory and agent supply-chain security
- Monitoring, incidents, and mitigation verification
Before lesson one
Plan a focused first session
Specific evidence gives Jakub a better starting point than a broad request to teach the whole subject. Use this four-part setup.
-
Arrive with evidence
Bring a code sample, error, command, diagram, dataset, requirement, or system behavior. A real sample gives Jakub something concrete to diagnose.
-
Define one result
Aim for one working technical artifact plus a clear explanation of why it behaves that way. State that result in the lesson request so the automatic lesson focus stays useful.
-
Attempt before the model
Show what you currently think or can do. Ask for a hint or question before requesting the completed answer.
-
Leave with retrieval
Explain the lesson back, save the hardest point as a review card, and schedule the smallest useful follow-up.
Choose the right lesson mode
Text chat
Pasting errors, comparing approaches, reviewing code carefully, and preserving exact commands or explanations.
Paste the exact material and state the feedback format you want.Voice call
Thinking through architecture, explaining a bug aloud, interviewing, and checking conceptual understanding.
Think aloud and ask Jakub to pause after each correction or question.Classroom
Shared code, architecture diagrams, debugging traces, documentation, and testable worked examples.
Share each workspace explicitly so the tutor can see the latest version.First lesson preview
What happens in your first lesson
A clear, flexible outline drawn from Jakub's teaching plan, so you know what to expect before you begin.
-
Step 1 Creative goal
Choose one practical result you want from Defensive LLM and agent security, threat modeling, prompt injection, indirect injection, data exfiltration, excessive agency, tool misuse, identity an. Jakub will use it to focus the lesson.
-
Step 2 Work sample review
Describe the AI system, untrusted inputs, tools, identities, secrets, memory, external effects, and the security control you most need to verify.
-
Step 3 Guided revision
Map assets and trust boundaries, enumerate threats, constrain identities and tools, isolate untrusted content, protect memory and secrets, add monitoring, rehearse incidents, and test mitigations.
-
Step 4 Next creative step
Threat models, permission matrices, prompt-injection test cases, tool-schema reviews, sandbox diagrams, supply-chain inventories, alert plans, and incident retrospectives.
What to bringBring a goal, question, example, or problem. No formal preparation is required.
Flexible by designJakub adapts this sequence to your level, chosen lesson length, and what becomes useful in the moment.
Example conversation
See how Jakub teaches
Illustrative exchange based on this tutor's profile and teaching approach.
Common questions
Questions before your first lesson
Practical answers about level, feedback, continuity, speaking, and writing with Jakub.
Can beginners use this tutor?
Jakub Zieliński is best listed for Security practitioners, AI application builders, platform teams, technical leaders, risk engineers, and advanced students working in authorized environments. Beginners can still request a foundational explanation, but a tutor marked for beginners may offer a smoother starting path.
Will grammar be corrected?
Jakub can correct grammar when it affects clarity, but the main lesson focus is LLM and AI-agent security tutor. For dedicated language correction, compare a language or writing tutor.
Does the tutor remember previous lessons?
When you are signed in, Jakub can use saved tutor memories, learning-path progress, relevant self-test results, and recent chat history. This is selective context rather than perfect recall, and you can review or change saved information in Settings.
Are speaking exercises included?
Yes. Start a voice lesson or a typed-input call with spoken tutor replies. Jakub can use verbal explanations, follow-up questions, presentation practice, or spoken rehearsal related to LLM and AI-agent security tutor.
Can I practice writing?
Yes. Use text chat or the classroom Document and Notebook tools to work on drafts, essays, stories, scenes, descriptions, structure, and revision choices. Jakub can comment, revise with you, and explain the reason for suggested changes.
Repeatable value
Use Jakub's lesson rhythm
A good session should produce something you can attempt, inspect, and revisit. This profile is designed around the following rhythm.
- Start
- Describe the AI system, untrusted inputs, tools, identities, secrets, memory, external effects, and the security control you most need to verify.
- Work
- Map assets and trust boundaries, enumerate threats, constrain identities and tools, isolate untrusted content, protect memory and secrets, add monitoring, rehearse incidents, and test mitigations.
- Continue
- Threat models, permission matrices, prompt-injection test cases, tool-schema reviews, sandbox diagrams, supply-chain inventories, alert plans, and incident retrospectives.
Progress roadmap
What steady practice with Jakub can build
A possible four-week direction based on this tutor's subject focus. Use it as a target, then adapt it to your starting point.
-
Week 1
A clear creative intention
Choose the effect, audience, or craft goal you want to explore with Jakub.
-
Week 2
Purposeful revision
Use specific feedback to strengthen one draft, performance, or design choice.
-
Week 4
A finished piece and repeatable process
Complete a focused work and explain how you will revise the next one.
Collaborative classroom
Use each classroom tool with a purpose
The whiteboard opens as the main lesson surface. Jakub can work with Whiteboard, Canvas, HTML, Document, Code Editor, Quiz, and Homework when each format helps. HTML is useful for responsive presentations, SVG, animation, and small interactions; it runs inside an isolated iframe. Whiteboard changes can auto-sync or be shared with Show tutor; the other tools display activity and save status while updates run.
Whiteboard
ClassroomTrace state, data, control flow, dependencies, and assumptions before changing code or infrastructure.
Best move: Draw or place the first version yourself, then use Show tutor or Update tutor so Jakub can respond to the current board.Canvas
ClassroomInteractive demonstrations, animated explanations, plotted relationships, and free-form visual experiments that benefit from executable JavaScript.
Best move: Ask for one focused interactive model, test a changed input, and describe what the visual behavior proves.Document
ClassroomKeep a debugging log with symptoms, hypotheses, evidence, the smallest useful change, and the lesson to reuse later. Write the requirement, architecture decision, API contract, or explanation beside the implementation so intent stays testable.
Best move: Keep your wording and decisions visible, then ask for a precise append, replacement, rewrite, table, or original SVG illustration.Quiz
ClassroomPredict the result first, run or inspect the example, explain the difference, and then solve one nearby variation. Save commands, patterns, failure modes, and explain-it-back questions as review cards after the code works.
Best move: Attempt each question before asking for help, then ask Jakub to adjust the next quiz around the mistakes that matter most.Homework
ClassroomThreat models, permission matrices, prompt-injection test cases, tool-schema reviews, sandbox diagrams, supply-chain inventories, alert plans, and incident retrospectives.
Best move: Agree on one realistic assignment, complete it after class, and reopen the saved work with Jakub in a later lesson.Code Editor
ClassroomUse Code Editor for the smallest reproducible example, keep line numbers visible, and ask for tests or checkpoints before a full solution.
Best move: Keep the example small, use the visible line numbers to discuss exact changes, and test a nearby variation before accepting a full solution.Jakub's methods
Profile-specific teaching tools
These methods come directly from this tutor profile. The surface label shows where to make the result visible during a classroom lesson.
Threat-model board
Maps assets, actors, entry points, untrusted content, identities, tools, memory, data flows, external effects, controls, and residual risk.
Try it with LLM and agent threat modeling in Canvas, make one attempt yourself, then ask Jakub to correct only what blocks the next step.Permission sandbox
Tests least privilege, scoped credentials, confirmation gates, tool schemas, network boundaries, output validation, and rollback.
Try it with LLM and agent threat modeling in Document, make one attempt yourself, then ask Jakub to correct only what blocks the next step.Attack-and-mitigation lab
Uses safe synthetic scenarios to verify defenses against injection, exfiltration, tool abuse, poisoned memory, spoofed messages, and cascading failure.
Try it with LLM and agent threat modeling in Document, make one attempt yourself, then ask Jakub to correct only what blocks the next step.Ready to use
Prompts that fit this tutor
These prompts use Jakub Zieliński's actual subjects, lesson format, and current classroom tools. Replace the topic with your own material when needed.
Describe the AI system, untrusted inputs, tools, identities, secrets, memory, external effects, and the security control you most need to verify.
I want to improve LLM and agent threat modeling. Use Threat models, trust-boundary diagrams, defensive labs, permission reviews, attack-tree exercises, tool-schema audits, sandbox designs, incident simulations, and mitigation verification. Check what I can already do, let me attempt something, and give one correction at a time.
Open the classroom for Prompt injection and data-exfiltration defenses and begin in Code Editor. Keep the task small, make me explain my choices, and finish with a short quiz plus one next-session goal.
Progress evidence
Know whether the lessons are working
Do not measure progress only by how clear the explanation felt. Look for changes in what you can retrieve, decide, produce, or explain without support.
- Predicts behavior before running the example
- Finds the failing boundary with fewer hints
- Explains tradeoffs instead of naming tools only
- Builds a nearby variation without copying the model
Responsible use
Use Jakub as a tutor, not an authority
Defensive and authorized security education only; no credential theft, exfiltration, malicious prompt payloads against real systems, persistence, unauthorized access, exploit deployment, safety-control bypass, or destructive agent actions. Product behavior changes quickly, so this tutor separates durable concepts from dated examples and asks learners to verify current official documentation, licenses, costs, data handling, and policy before deployment.
Jakub Zieliński is a fictional, unaffiliated AI tutor profile for high-technology AI education. It does not represent a real person, employer, product vendor, standards body, regulator, university, or certification provider, and it does not claim personal employment history, credentials, access, or endorsements.