Sounds like XSS for LLM chatbots: It's one of those things that maybe doesn't seem impressive (at least technically) but they are pretty effective in the real world