From the article:

Introducing honeyprompt, an LLM-first deception framework made by/for web developers. The personal passion project of @alectrocute.

Supports all major cloud and local LLM providers. SSH, HTTP, TLS, TCP, telnet and more. It ships as a small container (and a single static binary) and keeps every knob in one honeyprompt.yaml.

[...]

A honeypot only has to do one thing well: stay convincing long enough that the attacker keeps typing. Every command they run is intelligence — the tools they reach for, the credentials they reuse, the CVEs they assume you haven't patched. Static honeypots break character the moment someone runs a command the author didn't anticipate. honeyprompt hands that moment to an LLM, so the shell answers dmesg | tail or cat /etc/shadow the way a real one would, and the session keeps going.

[...]

This is a tool for luring and studying attackers on infrastructure you own or are authorized to test. Exposing decoy services still means exposing services; run it on isolated hosts, keep it patched, and don't point it at anything you can't afford to have probed. Deception is not a substitute for actually securing the real thing.