Prompt injection from github issue? This is funny but actually may be true.