The extraction prompt would need some hardening against prompt injection, as far as i can tell.