The feature is open to prompt injection, allowing users to get fooled into falling for a phishing scam or spreading misinformation.