Reminds me of prompt injection: A tool that cannot distinguish between data and instructions.