For anyone wondering what this is referencing, it’s a recent technique I found called prompt injection: https://simonwillison.net/2022/Sep/12/prompt-injection/